The VulnWarden scanner

VulnWarden is a vulnerability monitoring service used by web agencies. Its scanner reads the public pages of a website to find out which libraries and server software it runs, so the agency that looks after the site can be warned about known vulnerabilities.

It only scans sites that were verified. Before a site is scanned, whoever added it has to prove control of it by placing a secret token on the site: a meta tag, a file, or a DNS record. Without that proof, the scanner never requests a page.

Scans are passive and light: a handful of ordinary page requests once a day, to public addresses only. It does not log in, submit forms or try to exploit anything.

If you see these requests and did not expect them, or you want them to stop, remove the verification token from your site; scanning stops automatically after a few failed checks. You can also ask the agency that manages your site to remove it, or contact the operator of app.vulnwarden.de.