Trust badge

Monitor › Trust badge gives a website the Monitored by InfraFence badge. It links to a public trust page on infrafence.com with the time of the last check, the attacks blocked in the last 30 days and the protections active. It never shows addresses, findings or scores, and it is not a certificate. Every plan has it; agency branding (your name and logo on the trust page) needs Pro or AutoMode. Owners and admins add and change badges.

Add a domain#

Under Add a domain, pick the server, then a domain under Reported by this server, or type any domain under Domain. Then click Enable badge.

• The list shows the sites of the server's web server and hosting panel. From agent 1.0.35 it also shows the domains of the containers behind a reverse proxy, read from the labels the proxy uses: Coolify (Traefik or Caddy), and any container with Traefik router rules, Caddy labels or the infrafence.domain label (Docker). These carry a DNS tag.
• A server that reports no domain (an older agent, or no site found) still takes a domain typed by hand.

Verify the domain#

A badge turns on once InfraFence has checked that the domain is yours. There are two ways.

The verification file#

For a site in a document root on the server (cPanel, Plesk, nginx, Apache and the other panels), the agent writes /.well-known/infrafence-verification.txt in the site's document root, with the token on a line of its own, and removes it when the badge is turned off. The dashboard fetches it over HTTPS, usually within a few minutes.

A DNS TXT record#

A site in a container (Coolify, Docker) has no document root on the server for the agent to write to, and neither has a domain typed by hand that the server does not serve from a document root. The agent writes nothing for these: the badge page shows Verify with a DNS TXT record instead.

1. At the DNS provider of the domain, add a TXT record. Name: _infrafence.<domain> (for example _infrafence.shop.example.com). Value: the token shown on the page (ifv_ followed by 32 characters). If your provider adds the domain to the name by itself, enter only the part before it, such as _infrafence or _infrafence.shop.
2. Wait until the record is published: usually a few minutes, at most the record's TTL.
3. Click Check now. The hourly check also finds the record by itself.

The TXT record works for any domain, also one the agent could write the file for: a site behind a CDN that blocks the path, or one that redirects to another host.

After verification#

Verified sites are checked again every 30 days. A failed re-check turns the badge a neutral grey ("Last verified" and the date); three failed re-checks in a row disable it, and turning it off and on again starts the verification over. A site that waits for its first verification is checked every hour in its first week, then once a day, for 30 days.

Add the badge to your site#

Copy the HTML or Markdown snippet from Add the badge to your site: an image inside a link, with no script and no cookies on your site. Pick the light or dark style and the language of the badge and of the trust page.