how to

Trust badge

Add the NullSquare badge to a verified domain and give visitors a public verification page. Install a supported platform app, or publish the profile and add the snippet yourself.

A verified domain can publish a NullSquare badge and public verification page. Verification proves ownership; publishing the badge/profile is the consent step that makes the domain visible at nullsquare.net/verified/your-domain.

There are two ways to add it: install the NullSquare app for your platform and turn on its badge, or enable the public profile in Settings and add the generated snippet yourself. Either way your reports and findings stay private; the public page only confirms the domain is verified and protected by NullSquare.

What the badge is

The badge is a small, unobtrusive mark you place on your site, typically the footer or a floating corner. It links to your verification page. It is proof, not marketing: a visitor can click it and see an independent page confirming the site is verified and protected by NullSquare.

The badge on a site. It links to your public verification page; visitors can click it to confirm the domain is verified and protected by NullSquare.

Your public verification page

The badge links to a page NullSquare hosts at nullsquare.net/verified/your-domain. The page is live only when the domain target is verified, the organization has an active eligible plan, and public badge/profile publishing is enabled. It deliberately shows no findings, scores, or report details. Verification is public; your results stay private to you.

The page the badge links to, at nullsquare.net/verified/your-domain. It confirms the site is verified and public badge/profile publishing is enabled. Your findings and reports stay private.

How it works

Getting the badge is three steps. The same public profile system is used for platform apps and manually embedded badges.

Verify the domain target by DNS, HTTP, or a supported platform app challenge.
Enable the public badge/profile. For manual sites, use Settings -> Public verification profiles. For platform apps, turn on the badge in the app settings.
Install the badge. Platform apps place and sync it automatically. Manual sites use the Install code reveal in Settings or the example below.

The easy way — install the app

If your site runs on WordPress, Shopify, Wix, or Squarespace, install the NullSquare app. The app connects the site to your workspace, answers the verification challenge, and keeps badge state in sync. When the app badge is enabled, the same public verification profile goes live. When the app badge is disabled or disconnected, the public profile is unpublished.

WordPress Shopify Wix Squarespace

Developers — add it yourself

On a framework without an app, verify the domain target by DNS or HTTP, then open Settings -> Public verification profiles and enable publishing for that domain. Expand Install code and copy the generated snippet into your layout. The badge is a link plus an SVG image served by NullSquare; there is no script dependency.

The SVG request lets NullSquare record when the badge was last seen from your domain when the browser sends Origin or Referer headers. The public page still depends on the verified target, the enabled profile, and an active eligible plan.

<a href="https://nullsquare.net/verified/YOUR_DOMAIN"
   target="_blank" rel="noopener"
   aria-label="Verified by NullSquare">
  <img
    src="https://api.nullsquare.net/api/public/verified-sites/YOUR_DOMAIN/badge.svg"
    alt="Verified by NullSquare"
    width="214"
    height="40"
    loading="lazy"
    decoding="async">
</a>

Verified sites only

The public page exists only for verified domain targets with public badge/profile publishing enabled and an active eligible plan. If any of those checks fail, the public lookup returns not found.

Last updated Jul 16, 2026