Amazon Route 53

When you start a Deep scan, Lockpick first asks you to prove you own the site. Choose DNS record, then Show my DNS record, and keep that window open while you follow these steps.

1. In Route 53, open Hosted zones, choose your domain and choose Create record. Put the value in double quotes, as Route 53 asks for TXT records.
2. Choose TXT as the type. For the name, enter _lockpick-challenge for your main domain, or _lockpick-challenge followed by a dot and the rest of the address for a subdomain. Amazon Route 53 adds your domain to the end.
3. Paste the value Lockpick shows you, save the record, then come back to Lockpick and choose Check now.

Open Amazon Route 53

Leave Lockpick open after you save the record. It looks for it by itself and, if you opened it to run Deep, starts that scan once it's there, and the value stays the same if you come back later. Prove you own your site explains what happens after that.