Skip to main content

Guest Mode

Guest mode enables limited, unauthenticated scans for public users. It is designed for lightweight, low-friction checks and should not be treated as a full workspace experience.

What guest users can do​

  • Submit URL/domain scans via the public UI or guest API routes.
  • View global guest analytics that combine all guest activity.
  • Receive a risk score and explanation for each scan.

The guest dashboard shows public product value only: the scan entry point, global scan statistics, public domain leaderboards, recent public scan activity (Dralvia's own continuous threat-feed scanning, not the targets other guests chose to check), and a "Try Dralvia now" panel with free checks and next steps. Workspace analytics panels appear after sign-in. Unknown platform addresses show a clear missing-page state.

The "global scan statistics" total is the number of domains Dralvia has scanned across the platform. The large majority of it is Dralvia's own continuous threat-feed pipeline (automated scanning of domains from external intelligence feeds), not scans that guests or customers ran. The GET /community response reports this honestly in scan_activity, which splits the total into platform_pipeline (Dralvia's automated scanning) and user_submitted (scans a person actually ran). It is a measure of how much Dralvia scans, not of community submission volume.

After a guest scan returns a verdict, the scanner shows a one-click prompt to create a free account, so you can keep the result, raise your scan limits, and turn on saved history and continuous monitoring.

Sample scan report​

If you want to see what a full report looks like before running anything, open the sample scan report from the "Try Dralvia now" panel on the dashboard, or go directly to the #/sample-report address in the platform.

  • The page renders the complete report experience: verdict, top reasons, recommended next steps, evidence with explanations, score breakdown, redirect chain, replay timeline, and visual impersonation analysis.
  • Everything on the page is demonstration data. The site it describes is fictional, the page is clearly labeled "Sample data", and nothing comes from a live scan or from other customers' activity.
  • The sample report makes no scan requests and does not count against any limit. Actions that only make sense for a real scan (incident escalation, shareable links) are not offered on sample data.
  • Use the "Run your own scan" button on the banner to jump to the live scanner when you are ready.

What guest users cannot do​

  • Access workspace-only history, dashboards, or internal workspaces.
  • Generate workspace EvidencePacks (Dralvia's exportable evidence reports) or workspace reports.
  • Use workspace-only endpoints (billing, internal APIs, admin controls).

How guest scans are stored​

Guest results are stored without a workspace identifier and tagged with a short-lived session id. A domain you choose to scan is visible only to your own session (through the result you just ran and your session's guest history), and is not shown to other guests. The dashboard's "recent public scan activity" and domain leaderboards are drawn from Dralvia's own continuous threat-feed scanning, never from the targets other guests entered. Guest results are never mixed with workspace data.

Rate limits and abuse controls​

Guest endpoints are rate-limited and intended for light use. If you need higher limits or historical dashboards, provision a workspace account.

When to use a workspace account​

Use a workspace account if you need:

  • Historical scan dashboards
  • EvidencePacks and transparency logs tied to your workspace
  • API keys with quotas
  • Team access and workflow automation