urlscan

urlscan.io

urlscan declares 8 subprocessors in its subprocessor list, which we last checked on Nov 11, 2026 (evidence). They include Amazon Web Services, Google Cloud and Stripe. No published changes since we first read it on Nov 6, 2026. 1 tracked vendor, Prophet Security, names urlscan as a subprocessor.

Subprocessors CSV of urlscan's subprocessors · Atom feed of urlscan's subprocessors DORA draft CSV of urlscan's subprocessors as declared by urlscan what's this? · 

8 third parties.

NamePurposeLocationListed since
Amazon Web Services EMEA SARL Encrypted database backups
Backblaze Inc. URL scan results storage (DOM, Screenshot, API Trace)
DigitalOcean, LLC URL Scanning
Google LLC Google reCaptcha
Hetzner Online GmbH Core Infrastructure, database
Postmark - ActiveCampaign, LLC Transactional Emails
Stripe, Inc. Invoicing and payment
Vultr - The Constant Company, LLC. URL Scanning

Web TechnologiesCSV of urlscan's web technologies · Atom feed of urlscan's web technologies

urlscan's homepage made 57 requests to 4 domains, and 1 service controlled by another company.

Other (1): Security: Google Cloud

1 third party by category: Other 1

Third parties 1 · 21 requests
Google Cloudsubprocessor reCAPTCHA 37% of the page's requests 21
First party 1 · 36 requests
urlscan Bootstrap Glyphicons Google Font API HSTS Nginx RSS 63% of the page's requests 36

Subprocessor of (1)CSV of the companies listing urlscan · Atom feed of the companies listing urlscan

1 company
  • Prophet Security prophetsecurity.ai Current – authorized as of September 10, 2026. Used for scanning URLs for malicious content. This enhances our ability to analyze and neutralize web-based threats found within emails and other data streams. Optional - Customer may elect to disable the applicable Service feature(s).; URL Analysis

Incidents reported by urlscan's subprocessorsCSV of incidents reported by vendors urlscan lists · Atom feed of incidents reported by vendors urlscan lists

12 reported incidents in the last 30 days, by 2 of the vendors urlscan lists as subprocessors.

A subprocessor list names a company, not the service an incident touched. This does not show that urlscan was involved.

DateCompanyIncidentImpactLasted
StripeElevated Instant Payouts failures no impact stated2 h 5 min
StripeElevated Issuing errors from 17:13 - 20:41 UTC minor4 h 36 min
DigitalOceanKubernetes Cluster Management Operations major3 h 40 min
StripeElevated Blik errors no impact stated1 h
StripeElevated Bancontact errors no impact stated3 h 35 min
StripeElevated Bancontact errors no impact stated2 h 25 min
StripeSpike in cancellations and expired errors with PayByBank payments no impact stated2 h 17 min
StripeElevated Revolut Pay errors no impact stated9 h 32 min
StripeElevated declines on Mastercard no impact stated2 h 18 min
StripeElevated declines on Visa no impact stated53 min
StripeElevated Amazon Pay errors no impact stated12 min
DigitalOceanApp Platform Deployments no impact stated1 min

Who is around them.

ChangesCSV of urlscan's changes · Atom feed of urlscan's changes

See the list as we read it on any date: Time machine

None since tracking began.

Rating badge for urlscan's site

urlscan transparency rating

It updates with the rating.

<a href="https://thirdpartyindex.com/vendors/urlscan"><img src="https://thirdpartyindex.com/badge/urlscan.svg" alt="urlscan transparency rating on Third Party Index" height="20"></a>
[![urlscan transparency rating on Third Party Index](https://thirdpartyindex.com/badge/urlscan.svg)](https://thirdpartyindex.com/vendors/urlscan)