White-label Badge

White-label Badge Overview

The white-label badge feature lets VIP users replace all Shieldome branding on the security badge with their own - custom label, accent color, and logo. Clients only see your agency name. Shieldome is invisible.

How it works

Each VIP user gets a private badge token. When the token is appended to a badge URL as ?t=TOKEN, the badge displays your custom label, color, and logo instead of Shieldome defaults.

1. Configure your label, color, and logo in Settings → White-label Badge.
2. Copy the generated embed code and paste it on your client's website.
3. Optionally deploy a Cloudflare Worker to also hide the app.shieldome.com hostname.

Configure your badge

Open Settings → White-label Badge. You will see three customisation fields:

Click Save to persist changes. Changes apply to all badge renders immediately.

Your badge token

The token is shown in the Your Badge Token row. It is a 32-character random string that links your custom config to badge requests. Keep it private - anyone with the token can render your branded badge.

Click ⟳ Rotate to generate a new token at any time. After rotation, update all embed codes; old tokens stop working immediately.

Embed codes

Two embed codes are generated automatically once your token exists:

Grade badge

Displays the current security grade (A, B, C, D, or F) for a domain. Replace DOMAIN with the scanned domain name.

<img src="https://app.shieldome.com/badge/DOMAIN?t=YOUR_TOKEN" alt="Security Grade" />

Certificate badge

Displays a certificate badge for a specific scan. Replace SCAN_ID with the scan's ID (shown in the scan detail URL). This badge only renders for scans with grade A or B.

<img src="https://app.shieldome.com/certificate/SCAN_ID/badge.svg?t=YOUR_TOKEN" alt="Security Certificate" />

Custom logo

Upload your agency logo in the Badge Logo row of the settings card. Supported formats:

• SVG - recommended; scales perfectly at all sizes
• PNG - works well for logos with transparency
• JPG - supported but PNG preferred for logos

Maximum file size: 200 KB.

If you have not uploaded a badge logo but have uploaded a report logo (in Settings → Report White-labeling), the report logo is used as a fallback automatically. If neither is set, the Shieldome default shield icon is shown.

Click ✕ Remove logo to revert to the fallback.

Option B - Branded URL via Cloudflare Worker

By default, badge URLs show app.shieldome.com in the browser. If you want to serve them from your own domain (e.g., scanner.youragency.com), you can deploy a Cloudflare Worker that proxies requests to Shieldome and injects your token automatically.

The Worker code is auto-generated for you in Settings → White-label Badge → Cloudflare Worker setup. Copy it and deploy it on your Cloudflare account. No changes are needed in the embed codes once the Worker is live - use your own domain in the src attribute.

// Example Cloudflare Worker
export default {
  async fetch(request) {
    const url = new URL(request.url);
    url.hostname = 'app.shieldome.com';
    url.searchParams.set('t', 'YOUR_TOKEN');
    return fetch(url.toString(), { headers: request.headers });
  }
}

With the Worker deployed, your embed code becomes:

<img src="https://scanner.youragency.com/badge/DOMAIN" alt="Security Grade" />

Deciding between Option B and Option C

Use Option B (token in embed code) unless your client explicitly requires that app.shieldome.com must not appear in the badge URL. For most white-label engagements, Option B is sufficient.

Rotating your token

If a token is compromised or you are offboarding a client, rotate the token immediately in Settings → White-label Badge → ⟳ Rotate. After rotation:

1. Old embed codes stop displaying your branding (badge renders with default Shieldome style).
2. Update all embed codes with the new token.
3. If using a Cloudflare Worker, update the token in the Worker script and redeploy.