Cybersecurity
External security check
A free reading of one public site: browser headers, the certificate, DNS, mail records, and the privacy signals on the first page.
The letter counts every confirmed row: present counts full, review counts half, and unconfirmed stays out. Cookie rows are signals on the first page, not a legal conclusion. This is not a penetration test or a certification.
Scope of this review
- HTTPS persistence (Strict-Transport-Security) Tells the browser to stay on HTTPS.
- Content policy (Content-Security-Policy) Limits where scripts and other content can load from.
- Framing control (X-Frame-Options or frame-ancestors) Stops another site from embedding this page.
- Content type lock (X-Content-Type-Options) Stops the browser from guessing the file type.
- Referrer policy Limits the address sent when a visitor leaves.
- Browser permissions (Permissions-Policy) Closes camera, microphone, location, and payment unless the page needs them.
- HTTPS and certificate The certificate chain verified for this name.
- DNS A signed zone publishes a DNSKEY or DS record. If this resolver cannot ask, the result stays unconfirmed.
- Mail records The published sender policy. This does not send a message.
- Privacy and cookies A cookie notice or consent control is visible on the first page.