Halo Security

Verifiable

The scanning engine of Halo Security's attack-surface-management platform, which probes web applications a customer has added as a target to find vulnerabilities and inventory their external assets. Halo Security documents that it appends the string vuln_scan_by_trustedsite_com_halo_security to the User-Agent header so site owners can tell its traffic apart, and publishes the network ranges its scanners and web-preview "webshot" service originate from. It scans only customer-configured targets rather than crawling the open web, so Halo Security documents no robots.txt handling for it.

Operated by Halo Security · Official documentation

User agents

Patterns this directory matches, with real observed strings.

regexvuln_scan_by_trustedsite_com_halo_security
observedMozilla/5.0 (Macintosh; U; Intel Mac OS X 10_10_3; en-us) AppleWebKit/600.6.3 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/600.6.3 vuln_scan_by_trustedsite_com_halo_security

How to verify

Documented static ranges: 3.18.82.183/32, 54.187.125.96/32, 64.39.96.0/20, 74.82.62.128/26, 139.87.112.0/23

IP ranges (5)

Refreshed daily from the operator's feed. Also available as /data/ips/halo-security.ips and /data/bots/halo-security.json.

139.87.112.0/23
3.18.82.183/32
54.187.125.96/32
64.39.96.0/20
74.82.62.128/26

Good Bot Practices scorecard

Identifies honestly
Stable UA token documented (1 pattern)
Verifiable
Verifiable
Respects robots.txt
Does not honor robots.txt
Behaves
Crawl-rate behavior is operator-declared; not machine-verifiable from this dataset
Reachable operator
Operator and documentation published

Measured against the Good Bot Practices.