Module

Security

26 audits · 158 checks · 65 findings

Audits

Session tokens readable in the browser 4 checks
TLS certificate and configuration 10 checks
HTTPS enforcement 6 checks
Mixed content and insecure forms 4 checks
Security headers 17 checks
Cookie security attributes 6 checks
Outdated and vulnerable libraries 4 checks
Information exposure 11 checks
Outbound link safety 7 checks
Site reputation 3 checks
Email authentication records 12 checks
Domain and DNS 6 checks
Unexpected changes 7 checks
Sensitive content 4 checks
security.txt 4 checks
External attack surface 3 checks
HSTS promises HTTPS everywhere, the site does not deliver it 5 checks
The content security policy and the page disagree 5 checks
Security headers differ between parts of the same site 5 checks
Cookie attributes contradict each other or the connection 5 checks
robots.txt hides paths that are open to everyone 4 checks
Script integrity and versions do not match what loads 5 checks
DNS points at things that are gone or unlisted 6 checks
Certificates and the hosts in use do not line up 5 checks
Security claims and security.txt that the site contradicts 5 checks
Pages meant to be private are published as public 5 checks

Findings