How our declared-surface check works

Perissos shows buyers what a company's own public endpoints broadcast. This page states exactly what our retrieval does and does not do. The User-Agent string below links here, so that any site operator seeing our requests can read this page.

Our requests identify themselves as: Perissos-declared-surface-check/1.0 (+https://perissos.ai/crawler)

• We make read-only GET requests to unauthenticated, protocol-intended endpoints only: well-known locations such as /.well-known/security.txt and /.well-known/agent-card.json, and metadata URLs those documents themselves advertise.
• We never execute a company's functionality, never send adversarial or malformed input, never attempt to authenticate, and never probe beyond the published, protocol-intended locations.
• We honour robots.txt, including for well-known paths where the underlying standard would not require it. A disallow is recorded neutrally as “not fetched”, never held against anyone.
• If a company asks us to stop retrieving their public endpoints, we stop permanently. Their profile then states, as a neutral dated fact, that observations are no longer refreshed.
• We rate-limit ourselves: at most one short burst of requests per company per cache window (currently 30 days), with spaced requests inside a burst.
• Every fetch is recorded: URL, timestamp, HTTP status, and a hash of any retrieved document. Every fact we show links to the recorded fetch that proves it.
• Only a complete, well-formed response is treated as a document. Error pages, interstitials, and catch-all responses are recorded as failed fetches, never as facts about anyone.

Is this your company?

You can claim your company's page, free of charge. We verify you through your own site: the claim link is emailed only to the security contact your site publishes, never to an address typed into a form. Sign in through the buyer door, look your own company up, and choose Claim this page. If your site does not publish a security contact, write to reports@perissos.ai and we will verify your company and send you one.

Site operators: to ask questions about our retrieval, or to ask us to stop retrieving your endpoints, email reports@perissos.ai. A stop request is honoured permanently.