Computershare
Excellent security posture. Strong in: dns, tls, headers, files, general.
The CSP includes 'unsafe-inline' or 'unsafe-eval' which weakens protection.
Recommendation: Remove unsafe directives and use nonces or hashes instead.
The server does not support TLS 1.3, the latest TLS version.
Recommendation: Enable TLS 1.3 for improved security and performance.
No security.txt file was found. This file helps security researchers contact you.
Recommendation: Add a security.txt file at /.well-known/security.txt per RFC 9116.
SPF, DMARC, and DKIM are all configured for this domain.
HSTS is not applied to subdomains.
Recommendation: Consider adding includeSubDomains to HSTS if applicable.
Essential security headers (CSP, X-Frame-Options, X-Content-Type-Options) are configured.
No robots.txt file was found at the root.
Recommendation: Consider adding a robots.txt file to control crawler behavior.