If your site is protected by Cloudflare, a firewall, or other edge protection that blocks automated scanners, you can let our tool in by adding a custom HTTP header.
🔐 How Custom Headers Work
Some security layers block unknown automated requests. A custom header acts like a shared secret: you add the same header on your side (for example, in Cloudflare rules or your firewall) and in our tool.
When our tool connects with that header, the protection recognizes the request as allowed and lets the scanner browse your site. This avoids making broad “allow all” changes and keeps access tightly controlled.
💡 How to Setup a Custom Header
Log in to your AccessibilityChecker.org account.
Navigate to the Domain Settings section.
Click on Advanced Settings.
Scroll to the Custom Headers section.
You will now see a custom Header name and Header value field, which you will need to complete.
On your side (Cloudflare, firewall, load balancer, reverse proxy, server): create a rule that permits requests containing that header name/value and blocks or challenges others as you normally would.
⚙️ Picking a Header Name and Value
Header name (use a non-standard header):
X-MyScanner-AuthHeader value (random, hard-to-guess):
7f3b9e2a-4c1d-4d2b-9f6e-1a2b3c4d5e6f
Other formats that work:
Name:
X-Custom-AccessValue:
scanner-access--2025-09-26--R4nd0m
Tips:
Use a header name that starts with
X-or is clearly custom to avoid conflicts.Make the value long and random (UUID or cryptographic token).
Don’t use sensitive personal info in the header value.
Once you've added these details to your AccessibilityChecker.org Domain Settings and on Cloudflare or your firewall, test the implementation by making a request to your site with the header and confirm it’s allowed.