Reliable Test Results
Please feel free to run these tools (if you have the permission to scan a site) and compare results with this proof-of-concept. When you measure the cyber posture using OSINT, I am confident it will be better than Fortune 100 companies'.
- Internet.nl
- Security Headers
- HSTS preload check
- REDbot
- CSP Evaluator (Google)
- DOMsignal
- Wormly
- SSL shopper
- DNSSEC Debugger
- DNSviz.net
False Positive Results
The following tests either fail or give a false positive as they rely on the non-mandatory TLS1.2, user agents such as curl, obsolete protocols such as HTTP 1.0 or blatantly noisy ICMP echo.
Scripts and Tools
Primitives such as nmap, nikto, zaproxy, ping, hping3 do not work against this server.
Any suggestions? Contact us!
We will try to get perfect scores for any tests you may suggest. Please note that some scores are dumb, and we will not stoop down to their level just to boost the score.
Santosh Pandit
10 January 2024
Go to the Blog Collection