Document check
Verify a report
Every evidence pack and scan report has its SHA-256 fingerprint registered the moment it is generated. Choose the PDF you were sent to confirm it is genuine and has not been changed since. The file stays on your machine; only its fingerprint is checked.
Questions
What does a match prove?
That this exact file was generated by Attack Surface Scan on the date shown and has not been changed since, by even one byte. It does not re-run the scans; the findings are as they were when the document was generated.
Is the PDF uploaded?
No. Your browser computes the file's SHA-256 fingerprint locally and sends only that 64-character value. The document's contents never leave your machine.
The check says no match. What now?
Either the file was changed after it was generated (re-saving it from a PDF editor or printing it to PDF is enough), or it was not generated by Attack Surface Scan. Ask the organisation that sent it for the original download.
The report carries another company's name. Can I check it here?
Yes. Reports issued under a provider's own brand are registered the same way, and a match shows the issuer's name.