Verify Report
How to Verify

How to Verify a Scan Report

An official paid PDF includes a verification identifier. Use it to confirm ALLSCANTOOL issued that identifier. A file is compared only when you submit its SHA-256 hash.

  1. Find the identifier on the official PDF

    Open the official paid PDF. The verification identifier is printed on that PDF. TXT notes and copied findings are unofficial and have no verification identifier.

  2. Go to the Verify page

    Visit the verify page.

  3. Enter the verification identifier

    Type or paste the identifier exactly as it appears on the official PDF. To compare a file, choose that PDF on the verify page. The page sends the SHA-256 hash, not the PDF itself.

  4. Click Verify Report

    Click the Verify Report button. The result states whether the identifier was issued, revoked, or unknown. If you included a PDF, it also states whether that file's hash matches the issued document.

Frequently Asked Questions

What is a VRN?
It is a random identifier printed on an official paid PDF. By itself it shows that ALLSCANTOOL issued that identifier.
Where do I find the VRN?
On the official paid PDF. TXT notes and copied findings are unofficial exports and do not carry this identifier.
Can anyone verify a report?
Yes. Anyone who has the verification identifier can ask whether ALLSCANTOOL issued it. The response does not include the scanned code, findings, or account identity.
What does a successful verification mean?
Without a file, it means the identifier was issued. With the official PDF selected, a match means the file hash equals the hash stored for that identifier.
What if the VRN is not recognized?
Check the identifier for typos. If it is exact and still not recognized, it was not issued by this service.
Does verification store my code or report?
The verify page does not send the PDF or the scanned code. It can send the identifier and, if you choose a file, that file's SHA-256 hash. Issuance stores the identifier, report id, report hash, timestamps, status, and the existing hashed identity reference. It does not store source code, findings text, email, or payment details.

Ready to verify a report?

Go to Verify Report