Check your own BT instance for a known misconfiguration — no technical steps required.
We'll send a one-time code to confirm you're associated with the company whose instance you want to check. This also limits which URL you can test to your own company's domain.
We sent a 6-digit code to your email. It expires in 10 minutes.
btcheck.app is a new domain, so the email may land in your junk/spam folder the first time — check there if it doesn't show up in a minute or two.
Signed in as ·
You can only test a URL on your verified domain.
The check above only tests the WebTrack web sign-in. Ask your IT team or BisTrack reseller to also check whether any of these accounts are still active as local/on-prem accounts (a separate attack surface from the web login) — we won't send passwords, just the usernames to look for:
spruce, birch, hickory, pecan, poplar, willow, psi
Also check the Admin account specifically — by default it has no password set at all. It should be disabled, or given a password, immediately.
We'll send this checklist to your email so you can forward it directly to your IT team or reseller.