iOS app
The share extension
Share a link from Safari or any app and DomainGuard queues its domain to add. A link, or text that is a single web address; anything else is refused rather than half-parsed.
Updated · 2 min read
Share into DomainGuard is the shortest path from "I just noticed this site" to "it is in my inventory".
How to use it
- In Safari, or any app with a share sheet, tap Share.
- Choose DomainGuard.
- The extension normalises the link to its domain and queues it.
- Open DomainGuard; the queued domain is offered in the add flow with the usual switches (watch automatically, impostor check, subdomains, exposure scan, accessibility audit).
If DomainGuard is not in the share sheet's first row, scroll the app icons to the end, tap More, and enable it.
What it accepts
A link. The host is taken from it: the scheme, path, query and a leading www. are dropped and any other subdomain is kept, so https://shop.acme-plumbing.com/checkout?x=1 becomes shop.acme-plumbing.com and https://www.acme-plumbing.com/ becomes acme-plumbing.com. Plain text is accepted only when the whole of it reads as a web address or a host name. An image, a file, or text that is not a single address is refused with a message rather than searched for something domain-shaped, so a wrong share cannot add a wrong domain.
What it does not do
The extension does not add the domain by itself and does not run a second add-domain flow. The server owns the add, with its validation, plan rules and default checks; the extension only hands over the name. Nothing is added until you confirm in the app.
Common questions
I shared a link and nothing appeared. Open the app; the queue is read on launch. If what you shared was not a single web address (a longer text selection, for example) the extension will have refused it with a message.
Can I share several links at once? One per share. Use Import domains (Monitoring, List options) for a list.
Why URL only
A share sheet can hand an app almost anything: a photo, a PDF, a paragraph. Guessing a domain out of a paragraph is how a wrong domain ends up in an inventory with a scan running against it. The extension refuses everything that is not a URL so that the only thing it can ever hand over is a name that came from an address bar.
Keep reading
Related articles
- The Scan tab, the guest check and the App ClipQuick or full scans of any domain from the Scan tab, saved to your account; the free check from the welcome screen without an account; and the App Clip that runs that check.iOS app ·Updated
- The domain page, history and removing a domainThe four tabs of a domain's web page, the twelve modules in the app, the History ledger, the one-round-trip overview, Export PDF, and what deleting a domain destroys.Domains ·Updated
- Verifying a domain for deep scansBasic scans run on any domain. Deep scans (open ports, known vulnerabilities, exposed files) run on domains you verify: an email link, a DNS record or a file, about a minute, and we finish the check for you.Vulnerabilities and exposure ·Updated