It shows that a defined scope was assessed by Doki on a specific date and that the issues found within that scope were fixed and retested. The badge is time-limited; the verification result states the scope, the date and the validity period together.
It is not an official certificate or accreditation. It says nothing about systems outside the scope and does not guarantee that no new vulnerability will appear in the future.
If you see a Doki badge on a site but its code does not verify here, do not rely on that badge and let us know. An expired badge also shows as expired in the verification result.
A badge cannot be bought. It is issued at the end of a security test carried out with written permission, once the critical findings have been fixed and confirmed by a retest. The record states which domain and which date it covers.
After a serious security incident or a significant change in scope, a badge can be suspended or revoked. The verification page shows that status to visitors exactly as it is; a copied badge image cannot pass this check.
The other security pages: scope, the reporting route and the emergency line.
Tell us what you need; we will define the scope together.