Domain preview thumbnails

The domain cards in Domain Management show a visual preview thumbnail of each site, so you can recognize your sites at a glance.

How thumbnails are generated

Previews are produced by mShots, the public screenshot service of WordPress.com (operated by Automattic, a third party). The panel requests an image of https://<your-domain> from the service and displays it on the card — no capture is taken by Vulnity itself and nothing runs on your site to generate it.

Because of how the service works:

• It only works for sites that are publicly accessible over HTTPS. Sites behind a login, an intranet, or a maintenance wall will not render a preview.
• The first request for a new domain returns a temporary “generating” placeholder. The panel automatically retries once a few seconds later; if the image still cannot be loaded, the card falls back to a neutral placeholder with the site’s favicon or initials.
• Captures are cached by the service, so the thumbnail may take some time to reflect recent visual changes on the site.

What thumbnails are not

The thumbnail is purely cosmetic. It is not a security capture, it is not analyzed in any way, and it plays no role in monitoring, alerting, or the site’s risk score.

Privacy

To generate the preview, the panel sends your site’s domain name to WordPress.com (Automattic), a third-party service. The image is requested without a referrer, so the panel’s own URL is never disclosed to the service. No credentials or site data are sent — only the public address that the service then visits like any other visitor.

Next steps

• Domain Management — the cards where thumbnails appear.
• Delegated wp-admin access — open a site’s wp-admin from its card.
• Domain Risk — prioritize sites by their recent alert activity.