Domain Security Compliance Scanner

SSL:

Expiration: 2025-01-18 (56 days remaining)

Issuer: Google Trust Services

Authority: WE1

Download Certificate

TLS Configuration:

TLS (Transport Layer Security) encrypts data in transit, protecting against eavesdropping and tampering. Strong TLS configurations use up-to-date protocols and ciphers to ensure the highest level of security.

Content Security Policy (CSP):

CSP prevents XSS and data injection attacks by specifying allowed content sources, reducing malicious code execution risks. Consider implementing it for enhanced security.

X-Frame-Options:

X-Frame-Options header is missing. This header prevents clickjacking by controlling page rendering in frames. Without it, malicious sites could embed your page, potentially tricking users into unwanted actions.

HTTP Strict Transport Security (HSTS):

HSTS forces browsers to use HTTPS, preventing downgrade attacks and cookie hijacking.

Cookie Security:

Mixed Content:

Mixed content (HTTP resources on HTTPS pages) poses security risks, enabling potential attacks and content injection. Modern browsers may block it, breaking site functionality.

Web Application Firewall (WAF):

A WAF provides an additional layer of security for your website. Ensure it's properly configured and regularly updated for optimal protection.

HTTP Security Headers:

Server Version:

In theory you want to hide your software or version but not all announcements are bad.

DNSSEC:

DNSSEC adds a layer of trust to your domain name. It helps prevent DNS spoofing and cache poisoning attacks. Consider enabling it for enhanced security.

Nameservers:

• kenneth.ns.cloudflare.com (108.162.195.41)
• karsyn.ns.cloudflare.com (172.64.34.194)

DMARC:

DMARC helps prevent email spoofing and protects your domain from unauthorized use in phishing attacks.

DKIM:

DKIM adds a digital signature to emails, verifying that they were sent by an authorized sender and weren't altered in transit.