TentyAll guides

Connect your app

Connecting an app takes four steps: add it, prove it is yours, let Tenty in and read the first result.

Add the app

Press Add app on the Apps page and enter the address of the live app, for example https://my-app.example.com. Tenty starts with a scan of what any visitor can see. Until you prove ownership the page shows counts, the public findings and a marker when something critical exists. The evidence, the commands and the fixes stay with the verified owner.

Verify the domain

Verification proves that you control the domain. Pick one of two ways on the verify step:

  • A DNS record: a TXT record under the name _tenty-verify on your domain. The verify step shows the exact name and value.
  • A file: a text file at /.well-known/tenty-<token>.txt on your site. The verify step shows the token and the content.

Press Check once the record or the file is live. Tenty re-reads the proof from time to time, and the app stays verified while the proof stays in place. One verification covers the domain and its subdomains.

Let Tenty in

Some hosts and firewalls ask visitors to prove they are human, and that includes Tenty. When this happens the Access tab says so and shows one rule to add at your host:

  1. Open the firewall or bot protection settings of your host.
  2. Add a rule that lets requests with the header X-Tenty-Token through, using the token shown on the Access tab.
  3. Press Test connection.

Tenty sends the token only to your domain, over https, and you can replace it at any time. After a replacement the old token keeps working for 24 hours, so you can update the rule without a gap. Tenty checks the door again every hour and starts your scan when it opens. If the door stays closed you get one email and one reminder after three days.

Read the first result

The light on the app shows the result: red, yellow or green, and grey for a page Tenty could not read. Open the Findings tab for the evidence of each finding, a command that reproduces it and the fix. Every finding kind also has a write-up in these guides.

Next