HIP HIP Human Interactive Protocol
GitHub Scan a website
FOR WEBSITE OWNERS

Verify your domain and earn a HIP badge.

Verification connects a domain to the people who run it. A verification record says the findings were resolved on a specific date. It expires so the record cannot go stale.

STEP 01

Register the domain

Create an account and add the domain you manage. A first scan runs immediately.

STEP 02

Prove control

Publish the TXT record HIP gives you. Nothing else is installed on your site.

STEP 03

Resolve findings

Work the list, re-scan, and appeal anything you believe is wrong.

STEP 04

Earn the trust badge

HIP applies the current policy for the requested level. Certified status includes authorized manual review.

The DNS proof

One TXT record, unique to your domain and account. Remove it and verification lapses.

host  _hip.yourdomain.com
type  TXT
value hip-verify=8f2c41d9e0b7a6

Appeals & manual review

If a rule misreads your site, contest it. Reviewers see the same evidence you do.

OPENUrgency wording: checkout page2d
IN REVIEWThird-party script attribution6h
UPHELDRule updated for all domains3w
ILLUSTRATIVE TRUST RECEIPT

See what a scan receipt contains.

This printable example shows the intended format: score, findings, date and rule version. It is not a live scan or an issued HIP receipt.

HIP HIP Human Interactive Protocol
HIP-13662693
10 Sep 2026 16:03
example.com
82 / 100
Mostly Trusted
Connection is encrypted Your traffic to this site is private +12
Security certificate is valid Issued by a trusted authority, renews in 74 days +8
Domain ownership verified The owner proved they control this domain +6
Weak email protection Someone could send email pretending to be this domain −6
A new third-party script appeared Worth checking that you added it on purpose −2
No harmful behaviour found Clean across three independent security services +4
Rule setIllustrative example
Baseline70 (configurable)
Signals checked38 across 6 families
Verify athip.example/r/example.com

A score describes what HIP checked on this date and what it found. It is not a guarantee of safety, and it does not describe how the site may behave later.

RECEIPT FOR
Carries the rule version, so the score can always be reproduced.
States its own limits: no implied guarantee of safety.
Links back to a live result page that anyone can check.
Prints clean on one page, in dark or light theme.

Start with a scan.

Verification only makes sense once you know what is there.

See what each HIP badge represents

Rejoining the server...

Rejoin failed... trying again in seconds.

Failed to rejoin.
Please retry or reload the page.

The session has been paused by the server.

Failed to resume the session.
Please retry or reload the page.