Who is scanning
Outbound scan traffic uses this header:
User-Agent: BastionLLM Scan Agent (+https://bastionllm.com/security)Purpose: security validation of customer-configured AI endpoints.
Security
BastionLLM Scan Agent and Abuse Contact
This page explains how BastionLLM identifies scan traffic, how to contact us, and how to report abuse.
How to contact us
For abuse or incident handling:
How to opt out
If you are a service owner and want BastionLLM scans to stop for your endpoint, email [email protected] with:
- The domain or endpoint URL.
- UTC timestamp(s) of scan traffic.
- Source IP and relevant request log snippets.
Scope and safety
- Scans are intended to validate LLM security behavior.
- Destructive payloads are blocked by policy.
- Internal and local network targets are blocked by SSRF protections.
- Customer consent is required before endpoint attack scans are queued.
Report abuse
Include as much context as possible so we can resolve quickly:
- Timestamp in UTC.
- Full request path and method.
- Observed User-Agent value.
- Any mitigation already applied (for example blocks or rate limits).