Connect with us

NEWS

GLPI Lifts Its Dividend 5% as Its Valuation Gap Reaches 50%

Published

on

Gaming and Leisure Properties, Inc. (NASDAQ: GLPI), the Wyomissing, Pennsylvania-based real estate investment trust that owns 71 casino properties across 21 states, raised its quarterly cash dividend 5% to $0.82 per share on May 20. Against GLPI’s closing price of $47.22 that day, the new payout translates to an annualized yield of 6.95%, and the company has now paid its dividend without interruption for 13 consecutive years.

But the income story competes with a valuation puzzle most yield-focused investors skip past. Multiple discounted cash flow models put GLPI’s intrinsic value near $96 per share, roughly double the current trading price. Whether that gap represents genuine mispricing or a reasonable discount for risks the models assume away is the argument the stock has been staging for the better part of two years.

Thirteen Years, Zero Missed Payments

GLPI reported record first-quarter 2026 results in April, beating analyst estimates for both revenue and earnings. Total Q1 2026 revenue reached $420 million, against a consensus estimate of $417.3 million. Adjusted funds from operations (AFFO, a REIT-specific metric that strips out depreciation, property sale gains, and other non-cash charges from earnings) came in at $297.1 million for the quarter, or $1.02 per diluted share.

Management followed those results by raising its full-year 2026 AFFO guidance to $1.212 billion to $1.223 billion, slightly above the prior $1.207 billion to $1.222 billion target. The board then declared the 5% dividend increase on May 20, with payment scheduled for June 26 to shareholders of record as of June 12. The official Q2 2026 dividend announcement from the board is on record via GlobeNewswire from the May 20 press release.

GLPI’s Q1 AFFO per share of $1.02 covers the new $0.82 quarterly dividend with roughly $0.20 to spare each quarter, which is what makes the 13-year payment streak operationally credible rather than a marketing talking point. Separately, insiders sold approximately $1.6 million worth of GLPI shares over the past three months, a minor counterpoint for investors watching the stock’s near-term momentum closely.

Two Models, Two Prices, One Stock

The Earnings Multiple and What It Signals

GLPI trades at a price-to-earnings ratio of 15.2x. The US Specialized REITs industry averages 30.4x. Those numbers belong together only with context: GLPI’s earnings composition, heavily weighted toward triple-net lease income from a concentrated regional gaming tenant base, has historically attracted a multiple discount relative to more diversified REIT peers. The question is whether 15.2x reflects a reasonable risk premium or a market that has stopped reading the lease book carefully.

The current valuation snapshot, in sequence:

  • $47.22 — GLPI share price on May 20, 2026, the dividend announcement date
  • 15.2x — GLPI’s current price-to-earnings ratio
  • 30.4x — US Specialized REITs industry average P/E ratio
  • 34.6x — Simply Wall St’s company-specific fair P/E estimate for GLPI

At a fair P/E of 34.6x, GLPI would need to trade at more than double the current level to close that gap through earnings multiple expansion alone. For further context, GLPI’s 5-year median P/E sits at 17.56x, per GuruFocus data, meaning the stock currently trades below even its own historical average, not just below sector peers.

The DCF Case: A Different Calculation

Where the P/E gap is notable, the discounted cash flow picture is dramatic. Simply Wall St’s two-stage Free Cash Flow to Equity model, drawing on analyst AFFO projections of $1.22 billion for 2026 and $1.39 billion for 2028, produces an intrinsic value estimate of $96.53 per share. Against GLPI’s May 20 closing price, that implies a 51.7% discount. Kavout’s independent analysis runs a consistent range, estimating intrinsic value at $94.82 to $96.65 per share.

DCF models of triple-net-lease REITs are sensitive to three inputs: the discount rate, the terminal growth rate, and the assumed creditworthiness of the underlying tenants paying rent. Shift any of those assumptions meaningfully and the fair value output moves by tens of dollars per share. Both models above assume GLPI’s rent roll continues on its contracted escalation path without a material tenant default. That assumption is the crux of the valuation debate, and the market’s persistent discount to model-implied value suggests investors aren’t fully buying it.

GLPI vs VICI Properties: A Tale of Two Casino Markets

GLPI and VICI Properties (NYSE: VICI) are the only two dedicated gaming REITs in the United States, but their portfolios reflect sharply different market bets. That difference explains much of GLPI’s persistent valuation discount relative to the broader specialized REIT sector.

Attribute GLPI VICI Properties
Primary Market US regional casinos (non-Strip) Las Vegas Strip and major urban venues
Portfolio 71 properties, 21 states (Q1 2026) Largest gaming REIT by annualized rent
Approximate Annual Cash Rent ~$1.6B (Q1 2026 NOI run rate) ~$3.2B (2025 investor data)
Unique Tenants 8 Multiple; megaresort-concentrated
S&P 500 Member No Yes (since 2022)
All-Agency Investment Grade Single-agency rated Yes (Fitch, Moody’s, S&P)

VICI’s Las Vegas focus gives it a tenant base with broader revenue diversification. Convention-driven megaresorts generate different revenue curves than a regional riverboat casino in the Midwest, and that premium location argument, combined with S&P 500 membership and triple-agency investment-grade credit ratings, justifies a higher valuation multiple for VICI. GLPI’s regional model offers higher current yield precisely because the market assigns it a lower multiple, reflecting the narrower tenant geography and concentration risk that come with the regional bet.

Why Casino Tenants Cannot Simply Walk Away

GLPI’s model is: buy casino properties, lease them back to operators under triple-net (NNN, meaning the tenant covers property taxes, insurance, and maintenance in addition to base rent) arrangements, collect the income, and stay entirely out of casino operations. As of March 31, 2026, that portfolio covers 71 properties across 21 states with eight unique tenants, and the company has recorded zero rent defaults since its founding.

The structural protection behind that zero-default record is not purely contractual. Casino licenses are tied to specific physical addresses, governed by individual state gaming commissions with their own approval processes. A tenant cannot simply pick up a license and relocate operations across the street. Moving a casino effectively means reapplying for a new license from scratch, a multi-year regulatory process with no guaranteed outcome. That switching cost is the embedded structural moat in GLPI’s business, and it explains why the default count has held at zero through COVID-19 closures, multiple tenant ownership changes, and regional economic downturns.

Lease terms reinforce the income stability layer by layer. Most GLPI leases carry annual rent escalators of 1% to 2%, with periodic variable resets linked to tenant net gaming revenues. When regional gaming volumes rise, those variable resets transfer a portion of that upside into GLPI’s rent line without requiring any operational involvement from the landlord.

The Variable That Models Cannot Lock Down

PENN Entertainment’s Shadow Over the Lease Book

GLPI’s Q1 2026 supplemental filing shows that approximately 87.2% of its cash rent comes from four publicly reporting tenants: PENN Entertainment (NASDAQ: PENN), Boyd Gaming (NYSE: BYD), Caesars Entertainment (NASDAQ: CZR), and Bally’s Corporation (NYSE: BALY). PENN Entertainment is the dominant counterparty among those four, with analyst estimates placing its share of GLPI’s total cash rent somewhere between half and 60% of the total book.

Any material deterioration in PENN’s financial health flows directly into GLPI’s rent security. GLPI has no operating lever to pull if casino revenues weaken, no capacity to adjust the product, attract new customers, or restructure operations at the property level. It can enforce the lease or negotiate, and neither option preserves the income stream cleanly if the tenant is genuinely stressed. Analysts across several research houses describe GLPI’s investment case as essentially a proxy bet on the dominant tenant’s lease coverage ratios.

Leverage and the Debt Covenant Floor

GLPI carries approximately $8.16 billion in long-term debt as of March 31, 2026, built through acquisitions including the Bally’s Lincoln purchase at an 8% capitalization rate and development commitments of up to $225 million toward Bally’s Chicago hard construction costs. Management maintains compliance with all financial covenants and the leverage ratio sits within target ranges. But $750 million to $800 million in planned 2026 development spend continues to add to that obligation base.

  • The dominant operator — estimated at 50% to 60% of GLPI’s total cash rent, creating a single-tenant credit dependency
  • Boyd Gaming, Caesars Entertainment, Bally’s — together with the dominant tenant, collectively accounting for approximately 87.2% of GLPI’s cash rent from publicly reporting operators
  • $8.16 billion — long-term debt as of March 31, 2026
  • $750 million to $800 million — planned 2026 development expenditure per company guidance

If the dominant tenant’s revenue-to-rent coverage ratios hold at or above contracted minimums through the end of 2026, GLPI’s AFFO per share compounds and the 51.7% DCF discount has a credible pathway to narrow. If those ratios deteriorate, the market’s persistent half-price discount to model-implied fair value starts looking like foresight, not oversight.

Frequently Asked Questions

When Is the GLPI Ex-Dividend Date for Q2 2026?

The record date for GLPI’s second quarter 2026 dividend of $0.82 per share is June 12, 2026. The ex-dividend date also falls on June 12. Investors must hold shares before that date to qualify for the payment. The dividend is scheduled to be paid on June 26, 2026.

What Is AFFO and Why Do Analysts Use It for REIT Valuation?

AFFO stands for Adjusted Funds From Operations, a REIT-specific metric that removes depreciation, amortization, gains or losses on property sales, and other non-cash accounting items from reported earnings to better reflect the actual cash a REIT generates to fund dividends and capital allocation. For GLPI, Q1 2026 AFFO was $297.1 million, or $1.02 per diluted share, against a quarterly dividend of $0.78 paid that same quarter, implying solid coverage at that point.

How Does GLPI’s 6.95% Yield Compare to Broader REIT Benchmarks?

GLPI’s annualized yield of 6.95%, based on the new quarterly dividend and the May 20 closing price, sits well above the yields of most broad REIT index funds and diversified equity REITs, which have historically ranged from 3% to 5%. The premium reflects the concentration risk built into GLPI’s gaming-tenant-focused lease book and the higher risk premium the market demands for that exposure relative to diversified REIT structures.

What Is the Wall Street Consensus Price Target for GLPI in 2026?

Among analysts covering GLPI as of May 2026, the 12-month price target consensus sits around $52. Barclays holds an Overweight rating with a $53 target. Mizuho rates the stock Outperform at $53. Stifel rates it Hold at $50. Scotiabank rates it Sector Perform at $52. None of those targets approach the $96.53 DCF-implied fair value, reflecting the market’s collective view that gaming REIT DCF model inputs carry materially elevated uncertainty relative to other REIT subsectors.

How Has GLPI’s Total Return Compared to the REIT Sector Over the Past Year?

GLPI’s 1-year total shareholder return of approximately 10.32%, inclusive of dividend payments, compares favorably against the US Specialized REITs sector’s approximate 5% return over the same period, though it lags the broader US equity market’s performance considerably. Year to date as of late May 2026, GLPI shares have returned approximately 7.81%, with dividend income accounting for a material share of that total return given the sub-$50 share price.

Disclaimer: This article is for informational purposes only and does not constitute investment advice or a recommendation to buy or sell any security. Investing in REITs and individual stocks involves risk, including the possible loss of principal. Figures cited reflect publicly available data as of publication on May 27, 2026. Readers should consult a qualified financial professional before making investment decisions.

Logan Pierce is a writer and web publisher with over seven years of experience covering consumer technology. He has published work on independent tech blogs and freelance bylines covering Android devices, privacy focused software, and budget gadgets. Logan founded Oton Technology to publish clear, no nonsense tech news and reviews based on real hands on testing. He has personally tested and reviewed dozens of mid range and budget Android phones, written extensively about app privacy, and built and managed multiple WordPress publications over the past decade. Logan holds a bachelor's degree in English and studied digital marketing at a certificate level.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

GAMING

Xidax X-6 RTX 5070 Ti Gaming PC Hits Its 30-Day Low at Newegg

Published

on

Newegg has the Xidax X-6 Series gaming desktop at $2,449.99, marked down from its $2,999.99 list price and sitting at its lowest point in 30 days. Inside the Onami White chassis sits an NVIDIA GeForce RTX 5070 Ti with 16GB of GDDR7 memory on NVIDIA’s Blackwell architecture, a Ryzen 7 9800X3D processor boosting to 5.2GHz, 32GB of DDR5 dual-channel RAM, and a 2TB NVMe (Non-Volatile Memory Express, the high-speed solid-state storage interface) SSD, assembled and serviced in Xidax’s Utah facility.

Comparable RTX 5070 Ti builds from standard-tier brands typically land between $2,200 and $2,400, without the boutique build quality. Getting an Xidax at this price narrows that premium to a question worth answering seriously. But the configuration also draws a hard line: the Ryzen 7 9800X3D is purpose-built to maximize frame rates, not to power a dual-role creative workstation, and that shapes who this deal is actually for.

Boutique Pricing Hits a 30-Day Floor

Xidax gaming PCs sit above the typical prebuilt price band for equivalent hardware, and for visible reasons. Every unit ships hand-assembled from the company’s Utah facility rather than rolling off an offshore production line. The X-6 Series Onami White features curved tempered glass panels, an aRGB interior, and a case designed to function as a display piece as well as a gaming rig. The premium case and in-house assembly are baked into that original $2,999.99 price tag.

At $2,449.99, the arithmetic changes. The boutique premium over a budget-tier prebuilt with the same GPU shrinks to somewhere between $250 and $450 depending on which alternative you’re comparing, and Xidax’s build quality gap over those alternatives is real. Newegg’s 30-day low badge tracks against the broader spring pattern: 50-series prebuilt inventory has expanded since January, and deal frequency on RTX 5070 Ti systems has increased noticeably heading into summer.

Where the Xidax X-6 currently sits relative to three competing builds in the same GPU tier:

  • $2,449.99 for the Xidax X-6 Onami White (Ryzen 7 9800X3D, 2TB SSD, boutique Utah assembly, on sale at Newegg)
  • $2,399.99 for the ZOTAC MEK RTX 5070 Ti (Ryzen 7 9700X, 1TB SSD, OEM build), recently $200 off on Amazon
  • $2,189.99 for the HP OMEN 45L (Intel Core Ultra 7 265K, RTX 5070 Ti, 1TB SSD), $310 off on Amazon
  • $2,000-$2,200 is the range where Skytech and ABS RTX 5070 Ti builds from brands like the Skytech King 95 and ABS Kaze II Ruby cluster, typically with a Ryzen 7 7800X3D or 9700X

What NVIDIA’s Blackwell Architecture Delivers

The RTX 5070 Ti sits between two clear market positions. The RTX 5070 below it handles 1440p gaming well but gives up VRAM headroom and ray tracing performance. The RTX 5080 above it adds substantially more compute headroom, but at a price that pushes most prebuilts to $3,000 or higher. For ultra settings at 2560x1440p resolution without leaning on upscaling, the RTX 5070 Ti handles the load natively. At 4K, DLSS 4 (Deep Learning Super Sampling, NVIDIA’s AI-powered frame upscaling system) and MFG (Multi-Frame Generation, an AI technique that inserts additional rendered frames between native ones) do the heavy lifting in supported titles.

The Blackwell silicon in this card carries several measurable improvements over NVIDIA’s prior Lovelace generation. Key specifications from NVIDIA’s published Blackwell architecture documentation:

  • 16GB GDDR7 video memory on a 256-bit bus, providing strong bandwidth for high-resolution textures, ray-traced scenes, and VRAM-intensive mods
  • 8,960 CUDA cores for rasterization and general-purpose GPU compute across gaming and creative workloads
  • 4th-generation RT Cores for hardware-accelerated ray tracing, a full generational step over Lovelace’s third-generation implementation
  • 5th-generation Tensor Cores driving DLSS 4’s AI upscaling pipeline, including the Multi-Frame Generation mode that can multiply effective frame output in supported games

For creative applications, the card handles 4K video editing timelines and mid-complexity 3D rendering without issue. Its ceiling relative to the RTX 5080 shows up in sustained professional rendering pipelines, where the compute gap compounds over hours. Paired with the Ryzen 7 9800X3D, the combination is optimized for gaming output rather than professional throughput.

The 9800X3D Cache Advantage at 1440p

AMD’s Ryzen 7 9800X3D runs 2nd-generation 3D V-Cache, AMD’s process of vertically stacking 64MB of additional SRAM directly onto the processor die. The result is a total 96MB of L3 cache, compared to the 32-64MB typical of non-X3D desktop processors. The cache’s job in gaming is to keep more of the game’s actively used code paths and rendering instructions on the die itself, so the CPU spends less time waiting on slower system RAM. Those waits create frame time spikes and elevated 1% lows, the stutter a player feels even when average frame rate looks high.

In gaming benchmarks, the architecture lead over Intel is significant. Tom’s Hardware’s review of the 9800X3D found it outperforming Intel’s Core 9 285K by approximately 35% on average across a broad test suite, a margin Intel has not closed through multiple successive chip generations. The VRLA Tech benchmark analysis confirms the same pattern in 2026: the 9800X3D’s advantage is most pronounced at 1440p, where the GPU is handling meaningful load but the CPU still influences frame pacing. At 4K, games shift closer to fully GPU-bound operation and the cache advantage narrows.

The second-generation cache design also places the SRAM below the processor cores rather than above them, a structural change from the first-generation X3D architecture. Positioning the cache beneath the cores improves heat transfer away from the die, allowing the 9800X3D to support AMD’s Precision Boost Overdrive overclocking feature. Standard prebuilt configurations like the Xidax X-6 run at rated clocks rather than a tuned PBO profile, but the stock performance at 4.7GHz base and 5.2GHz boost still delivers the smoothest frame delivery available from a consumer gaming CPU in this generation.

Xidax X-6 Versus the Value Tier

Three builds from the current market establish what the Xidax premium buys and where cheaper alternatives make a stronger case:

Feature Xidax X-6 Onami White HP OMEN 45L ZOTAC MEK RTX 5070 Ti
Current price $2,449.99 $2,189.99 $2,399.99
GPU RTX 5070 Ti 16GB GDDR7 RTX 5070 Ti 16GB GDDR7 RTX 5070 Ti 16GB GDDR7
CPU Ryzen 7 9800X3D (5.2GHz boost) Intel Core Ultra 7 265K Ryzen 7 9700X (5.5GHz boost)
RAM 32GB DDR5 32GB DDR5 32GB DDR5
Storage 2TB NVMe SSD 1TB NVMe SSD 1TB NVMe SSD
Assembly Boutique, Utah in-house HP OEM ZOTAC OEM
Best fit Gaming-first, premium aesthetics Gaming plus creative workloads Gaming, value-focused

The HP OMEN 45L makes a specific argument for buyers who do more than game. Intel’s Core Ultra 7 265K carries 20 P-core threads and a multi-threaded compute profile that outperforms the 9800X3D in video encoding, compilation, and sustained rendering tasks. At $260 less than the Xidax, it pairs that Intel flexibility with the same GPU and the same RAM, though it ships with half the storage. For anyone who edits, streams at professional settings, or runs demanding creative software alongside gaming, that $260 is better spent on the OMEN.

The ZOTAC MEK is the value play. Its Ryzen 7 9700X (Zen 5 architecture, 5.5GHz boost, no 3D V-Cache) trades cache depth for a higher boost clock, which helps in applications that scale with frequency rather than cache size. For pure gaming performance head-to-head against the 9800X3D in cache-sensitive titles, the 9700X concedes ground. The Xidax’s 2TB storage advantage also matters practically, given that modern AAA titles routinely exceed 100GB per install.

Who This Build Serves, and Who It Doesn’t

The strongest case for the Xidax X-6 at $2,449.99 is the gaming enthusiast who values build quality and is comfortable paying a moderate premium over a budget prebuilt for something that looks and feels different. Boutique assembly and case design hold real value for buyers who will live with a PC on their desk for three or more years. The 9800X3D’s 3D V-Cache advantage is most visible in open-world titles with complex geometry streaming, strategy games running dense AI agent calculations, and simulation games, which collectively describe a large portion of the 2026 AAA release calendar. Combined with the RTX 5070 Ti’s Blackwell feature set, this configuration will handle that workload at 1440p ultra settings without compromise.

Two buyer types should skip it. Heavy creatives doing sustained video editing, 3D rendering, or compilation work need Intel’s higher core count or AMD’s own Ryzen 9 9950X3D over the 9800X3D. The cache architecture that makes the 9800X3D exceptional for gaming trades off the raw multi-threaded throughput those workflows require. Buyers watching their budget more carefully will find RTX 5070 Ti systems from Skytech and ABS starting $250 to $450 below the Xidax, capturing the same GPU tier with a 7800X3D or 9700X processor in a standard prebuilt case. Note also that the Xidax X-6 Series listing on Newegg carries a component brand disclaimer: specific internal component brands may vary from what is advertised, which is standard practice for boutique builders managing parts availability.

The 30-day low badge marks this as an active deal window, not a permanent price shift. If the Xidax X-6 climbs back toward $2,549 or above in the coming weeks, the arithmetic against the HP OMEN 45L and the ZOTAC MEK tightens considerably, and the boutique premium becomes harder to justify. At $2,449.99, it holds. At $2,549, the HP OMEN’s $360 price gap starts doing real work.

Continue Reading

NEWS

How to Remove Your Phone Number From Google Search Results

Published

on

Type your own name into Google. If your phone number, home address, or email shows up in the results, Google’s free “Results About You” tool lets you request removal directly from your account without filling out lengthy legal forms.

The dashboard scans Google Search for your personal contact details on a rolling schedule and notifies you each time something surfaces. In February 2026, Google expanded it to flag government-issued ID numbers too. Most users have never opened it.

What the Results About You Dashboard Covers

  • 3 contact types monitored: phone numbers, email addresses, and home addresses
  • February 2026: the update added government-issued ID number monitoring, including US Social Security Numbers, and streamlined bulk removal for explicit images
  • 2 removal outcomes when a request is approved: full URL de-listing for most cases, or query-based removal for pages that also carry publicly valuable content

“Results About You” is a privacy dashboard accessible at Google’s Results About You privacy dashboard or through the Google app. Once you enter your name and contact details, Google scans its search index on a regular schedule and notifies you whenever those details appear in a result. You can then request removal of any flagged result from the dashboard itself, or directly from a search results page using the three-dot “More” menu next to any result.

That same update also simplified the removal process for explicit images, adding a three-dot menu option inside Google Images and enabling bulk removal requests instead of one-at-a-time submissions.

On data handling, Google states it stores the contact information you provide for monitoring using advanced encryption and access controls. The company says it does not use this data to personalize ads or share it with third parties, limiting its use to monitoring, processing removal requests, and maintaining request history within your account.

Setting Up Monitoring and Submitting a Removal Request

Setting Up Monitoring

  1. Go to myactivity.google.com/results-about-you, or open the Google app, tap your profile picture, and select “Results about you.”
  2. Select “Get started” or “Settings.”
  3. Enter your name. You can add nicknames, maiden names, and alternate spellings.
  4. Add your contact details: mobile numbers, home addresses, and email addresses. The tool accepts multiple entries for each type.
  5. Turn on notifications. Google emails you when a search result matches your entered details, with follow-up alerts as new results appear over time.

Submitting a Removal Request

Once you receive an alert, Google displays the flagged result in the “To review” tab. Select the result and choose “Request to remove.” If no removal option appears on a given result, it comes from a source Google considers valuable to the public, and the self-serve removal path is not available for that entry.

You can also trigger a removal from a standard search results page. Click the “More” dots next to any result, select “Remove result,” then “It shows my personal info and I don’t want it there,” then “Contact Info,” and follow the steps through. For situations involving harassment, doxxing, or professional information posted with intent to harm you, Google’s detailed removal request form covers a broader range of circumstances than the self-serve dashboard handles.

Checking Your Request Status

After submission, Google sends an email confirmation within a few hours. The “Removal requests” tab inside the dashboard shows whether each request is in progress, approved, denied, or undone. There can be a short delay between approval and the result actually disappearing from search, but Google says the change typically takes effect within hours once a request clears review.

What Google Removes and What It Keeps

Every request goes through a public-interest review. Results from government agencies, universities, and news publications typically stay in the index even when they contain your phone number or home address. The table below covers the main content types and how Google handles each one.

Content Type Google’s Position Notes
Phone number, home address, or email Removes when approved Must be your personal info, not a business listing you control
Government-issued ID numbers (SSN, passport) Removes when approved Coverage formally expanded in the latest tool update
Bank account or credit card numbers Removes when approved Covered under Google’s older personal information policy
Results from government or educational sites Will not remove Treated as public record; no removal option shown in the tool
Results from news publications Will not remove Treated as public-interest content
Info you control directly (your own social media or personal blog) Will not remove Google expects you to delete it at the source yourself

A denied request comes with an explanation via email, and the dashboard shows the specific reason for each one. Some cases can be escalated through the detailed removal request form for situations involving harassment or doxxing, where a broader policy framework applies.

Your Data Stays at the Source

Removal from Google Search does not delete the underlying information from the website that published it. Google’s own support documentation says plainly that even after a result is removed from Google Search, it might still be on the internet.

This matters because people-search directories and data brokers operate on a crawl-and-republish cycle. If your phone number appears on a people-search aggregator, removing the Google result blocks strangers from finding it through a Google query, but the original listing stays live on the host site. Market research firm SNS Insider projected the data broker industry would reach $441.4 billion in value by 2032, driven by companies that continuously harvest and re-index personal records from public sources. A number cleared from Google today can resurface in new search results weeks later from a different URL on the same or a different platform.

Treating a Google removal request as the first step is correct. Treating it as the final one is where most people stop short.

Building a Broader Privacy Layer

Google’s tool works best when paired with parallel steps at the original sources. The following actions close the gaps the Results About You dashboard cannot reach on its own:

  • Contact the source site directly. Most people-search directories publish an opt-out process. Some require identity verification; others process requests automatically within a few business days.
  • Register with the Do Not Call Registry. In the United States, the National Do Not Call Registry is free and permanent. Registration takes effect within 31 days for compliant telemarketers.
  • Set a Google Alert for your phone number. Enter your number as the search query at google.com/alerts. You’ll get a notification when it appears in newly indexed content, giving you time to file a removal request before the result accumulates traffic.
  • Audit your public social media profiles. Phone numbers listed openly on Facebook, LinkedIn, or older forum accounts feed directly into the data broker pipeline. Making those fields private stops fresh data from entering the cycle.
  • Consider a data removal service. Paid options automate opt-out requests across hundreds of data broker databases, a meaningful time saving for anyone with a long online history or an elevated-risk situation such as harassment or stalking.

Frequently Asked Questions

Does removing my phone number from Google Search delete it from the internet?

No. Removing a result through Results About You delists it from Google Search but leaves the content intact on the original website. To fully remove your information, you need to contact the site owner directly. Many people-search directories have automated opt-out pages; others require a written request or identity verification before they process the removal.

How long does Google take to process a removal request?

Google sends an email confirming receipt within a few hours of submission. The review process itself typically takes several days. Once a request is approved, the result usually disappears from search within a few hours, though Google notes a short delay is possible between the approval decision and the listing leaving the index.

What if Google denies my removal request?

Google denies requests when the result comes from a source it considers valuable to the public, such as government, educational, or news sites, when the information is something you can remove yourself at the source, or when it determines the content serves a broader public interest. The Results About You page shows the specific reason for each denial. Cases involving harassment, threats, or doxxing can often be escalated through Google’s personal information removal guidance, which covers a wider set of circumstances than the self-serve dashboard.

Can I use Results About You without a Google account?

The monitoring and dashboard features require a Google account. Without one, or if you prefer not to sign in, Google’s detailed removal request form lets you submit manual removal requests without logging in, though you won’t be able to track request status or receive automated alerts through the app.

Will my phone number come back in Google results after it is removed?

Possibly. If the source website still hosts your number and gets re-crawled, the information can reappear from the same or a different URL. Removing the data from the original site and setting a Google Alert for your number together significantly reduce the risk of it cycling back into the index without your knowledge.

The Results About You dashboard runs on a continuous schedule, checking your entered details against newly indexed results on a rolling basis and sending a notification each time something surfaces. Treat it as a standing alert rather than a single task to tick off. The phone number you cleared this week can reappear from a different source next month, but with monitoring active, you’ll catch it before a stranger does.

Continue Reading

NEWS

Vigolium AI Scanner Puts Token Budget Decisions on Operators

Published

on

Vigolium shipped its first open-source release this month with more than 250 scan modules and an in-process AI agent, called olium, that plans its own attack strategy, generates custom JavaScript extensions mid-scan, and re-checks every finding in a separate triage pass before delivering results to the operator. The project comes from a single author, Jessie Ho, and sits on GitHub under an AGPL (Affero General Public License, an open-source license that requires any entity making the software available over a network to also publish their modifications as open source) license at no cost.

The more consequential decisions in the design are not the module count. They are buried in the budget controls: how much token spend an operator permits per session, what the agent does when time runs out, and why the same JavaScript extension model that gives Vigolium its adaptability also makes a community extension marketplace a genuine security problem.

Two Modes, One Stack

Vigolium exposes two scanning paths from a single command-line interface. The first, vigolium scan, runs a deterministic multi-phase pipeline covering content discovery, browser-based spidering for single-page applications, and active and passive auditing across a module library of 251 scanners covering injection, access control, framework-specific checks, and out-of-band attack testing. That last category includes OAST (Out-of-Band Application Security Testing, a technique for detecting blind vulnerabilities like server-side request forgery and blind injection, where the payload triggers a callback to an external server rather than producing a visible response change). It is repeatable, fast, and fits a CI/CD (continuous integration and continuous delivery, the automated pipeline that tests and deploys code on each commit) gate without touching a language model. The full module breakdown is in Vigolium’s GitHub repository and architecture documentation.

The second path, vigolium agent, hands control to the olium runtime. The LLM (large language model, an AI system trained on large text datasets to generate and reason with language) harness selects its own modules, writes custom scan extensions based on what it observes in the target, and combines static source-code analysis with live dynamic testing. Eight AI providers are supported, including Anthropic’s API, OpenAI, Google Vertex AI, and self-hosted model servers via compatible endpoints such as Ollama and OpenRouter, so the tool is not tied to a single inference vendor.

The gap between the two modes is not only depth versus speed. Cost structure diverges sharply, and that divergence shapes how teams should reach for each.

Dimension Native Scan (vigolium scan) Agentic Scan (vigolium agent)
Logic model Deterministic, repeatable LLM-driven, adaptive
Module selection Fixed library: 154 active, 97 passive Dynamic; agent selects and generates extensions
Cost structure Compute only Compute plus AI token spend
Triage Inline, per module Separate pass after scanning completes
Best fit CI/CD gates, continuous coverage Pre-release audits, logic-flaw hunting

Budget Caps as the First Design Choice

Every autonomous reasoning loop costs tokens. Every tool call consumes context. A session without guardrails can wander for hours on a single target and return findings that are lower quality than a tighter, shorter run would have produced. Vigolium’s operator documentation exposes four configurable caps that are set before each agentic session starts.

  • Token cap: Total LLM token spend allowed per session. Raise for single-target deep dives; tighten for broad sweeps where one rabbit-hole target would otherwise consume the whole budget.
  • Tool call cap: Maximum agent tool invocations before the session is forced toward a conclusion, stopping open-ended exploration loops.
  • Triage iteration cap: Limits how many re-checking loops the agent can run on each candidate finding before delivering a verdict.
  • Wall-clock cap: A hard time limit that ends the session regardless of where the agent is mid-task. Ho recommends leaning on this first for CI runs and time-boxed engagements.

Ho described two failure modes from misconfigured caps in remarks to Help Net Security. Set too tight and the agent is cut off mid-investigation, returning a low-confidence stub that the operator still has to decide whether to act on. Set too loose and the agent wanders, spending tokens on diminishing returns and filling a report with noise that should not be there.

His guidance for new users is to open with the wall-clock and iteration caps set conservatively, then loosen only when a genuine investigation is visibly being cut off before reaching a conclusion. The judgment call shifts from the LLM to the human at the configuration stage, which is a more honest accounting of what agentic security tools actually provide: supervised autonomy, not full autonomy.

Triage Runs Separately from the Scan

AI-assisted security testing has a persistent credibility problem: the plausible finding that fails to reproduce. Cross-site scripting (XSS, a class of web attack in which malicious scripts are injected into pages viewed by other users) candidates that the agent reports with confidence but cannot demonstrate are worse than no finding, because they send a developer to chase a ghost and erode trust in every subsequent report from the same tool.

Vigolium handles this by making triage its own phase, run after scanning completes rather than inside it. Ho described the design at the project’s launch:

The scanner finds candidates, then a separate pass re-checks each one against its evidence.

On deduplication, the system favors transparency over quiet cleanup. The agent collapses exact copies of the same issue into a single representative entry but does not make keep-or-kill calls on borderline findings. Anything it is uncertain about is downgraded in severity and surfaced to the operator with its full evidence trail intact, including the specific request-response data that triggered the candidate. Operators see what the agent saw, rather than a curated version of it. That design keeps the audit trail complete and pushes the final judgment to a human, which is where it belongs.

Extensions Run Arbitrary Code Without a Sandbox

Vigolium’s JavaScript engine lets operators write custom scan modules using session-aware HTTP APIs (application programming interfaces, the standard connection mechanism between software services). The extensions run alongside built-in modules, accept command-line flags, and can execute arbitrary commands on the host machine. For teams scanning proprietary authentication flows, unusual API patterns, or frameworks the default module library does not cover, that extensibility is the practical point of the model.

It also creates a material trust problem for any sharing mechanism. Code signing establishes who wrote an extension. It does not tell an operator whether that extension is safe to run against a live application. Asked whether a community registry might emerge, Ho was candid about the constraints any such system would face, as covered in Vigolium’s product overview.

For a registry to function without simultaneously distributing exploits alongside scanners, three conditions would need to hold from the start:

  • Provenance and code signing on every submission, establishing a traceable author record so operators know exactly who built each module and when
  • An untrusted-by-default posture, with explicit operator opt-in required before any community extension is permitted to execute against a target
  • Active curation rather than open submission, keeping the available set small enough to meaningfully review before any module reaches production use

Continue Reading

Trending