About this tool

If you found BookingBenchSiteCheck in your website's logs, this page explains who we are and what it did. Someone typed your web address into our free site check, and a program read a few of your public pages.

What the scanner does

• It asks for your home page, your robots.txt file and up to two property pages that your home page links to.
• It makes only a small, fixed number of requests, no more than one a second, and it gives up on pages that are very large or slow.
• It does not sign in, fill in forms or run your scripts. It does download up to ten of your own script files and read them as plain text, the way you would read a document, to look for common problems such as a secret key left in the code or an out-of-date library. Nothing in them is ever run, and we do not keep copies of them.
• It names itself in every request: BookingBenchSiteCheck/1.0 (+https://sitecheck.tools.bookingbench.com/about).
• A website is freshly checked at most once a day. After that, anyone asking for the same site is shown the stored result.
• We keep the result (scores, findings and short public quotes, not copies of your pages) for 30 days. See the privacy page.

What we do with it

The person who ran the check sees the result. If the text of your scripts looks like it may contain a security problem, the result says only that some were found, not what they are, unless the person asking opened the report link in our email, sent to an address at your own domain. BookingBench staff and our automated tools can see the details. We do not publish results, and we do not contact the owner of a site because it was checked. We only email someone who gave us their own address, as the privacy page describes.

How to stop it

The scanner follows robots.txt for page requests. To keep it out of your pages, add this to the file:

User-agent: BookingBenchSiteCheck
Disallow: /

The check then tells the person who asked that your site asks not to be scanned. To have a website refused outright, whoever asks, email support@bookingbench.com with the domain name. We add it to our exclusion list by hand and reply when it is done.

Questions

BookingBench, 226 N Main Street, Sheridan WY 82801. support@bookingbench.com. We read everything sent there.