KPMG Australia
Professional services and consulting firm
Moderate security posture. Several improvements recommended. 2 high severity issues found. Strong in: dns, tls, files, general.
The server does not support TLS 1.2 or 1.3.
Recommendation: Enable TLS 1.2 and TLS 1.3 support.
No Content-Security-Policy header found. CSP helps prevent XSS attacks.
Recommendation: Implement a Content-Security-Policy header.
No DKIM records found for common selectors. DKIM provides email authentication.
Recommendation: Configure DKIM signing for your email service.
No CAA records found. CAA records specify which CAs can issue certificates.
Recommendation: Add CAA records to restrict certificate issuance to trusted CAs.
No Referrer-Policy header found.
Recommendation: Add a Referrer-Policy header (e.g., strict-origin-when-cross-origin).
No Permissions-Policy header found.
Recommendation: Add a Permissions-Policy header to control browser features.
No security.txt file was found. This file helps security researchers contact you.
Recommendation: Add a security.txt file at /.well-known/security.txt per RFC 9116.
robots.txt file exists and does not expose obvious sensitive paths.