Zoltra is built to see your surface without ever overreaching. What it scans, how it proves ownership, and how it reports are all deliberate.
No surprises, no scanning of things you did not authorize.
A domain must pass a DNS TXT ownership check before Zoltra scans it. Unverified domains are never touched.
Every finding is backed by observed evidence you can inspect, plus a clear remediation path and a one-click retest.
Results go to the channels you connect — Slack, Discord, email — and nowhere else.
Found something off? Reach the team directly at security@zoltra.io.