brightpay.co.uk

.uk crawl

First seen 2026-04-15 · Last seen 2026-05-12 · ok HTTP/1.1 200 2562 ms crawled 2026-05-09

US · 172.67.206.60 · AS13335 Cloudflare, Inc.

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title: Payroll Software | RTI & HMRC recognised | Auto Enrolment Functionality
Description: Payroll software with unlimited employees & free support. RTI compliant & HMRC recognised. Free Auto Enrolment & Payslips. Book a Demo. 60 day Trial
Language: en
Canonical: https://www.brightpay.co.uk/

Technology

CDN: Cloudflare

Analytics

Google Tag Manager

Fonts

Adobe Fonts

Third-party hosts loaded (8)

www.brightpay.ie×8
hello.brightsg.com×5
ajax.googleapis.com×1
js.hs-scripts.com×1
kit.fontawesome.com×1
use.typekit.net×1
www.google.com×1
www.googletagmanager.com×1

Social

Contact

Phone

03459390019

Registration

Registrar

Cloudflare, Inc.

Created

2011-02-02

Expires

2027-02-02 258 days left

Updated

2026-01-03

Name servers

amit.ns.cloudflare.com.
kia.ns.cloudflare.com.

DNS records live

NS

amit.ns.cloudflare.com
kia.ns.cloudflare.com

MX

0 brightpay-co-uk.mail.protection.outlook.com

Verified for

Ahrefs
Microsoft 365

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:spf.thesaurussoftware.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; pct=25; rua=mailto:bbd086b4b78a4e0992338c080a6d93d7@dmarc-reports.cloudflare.net

policy: quarantine · pct=25

DKIM

s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32PJivqwlK5A/jQK/Q+4CNYDG+rOu8DIGPVkeyF/KSdfW8OYvVuAOlh2fGkS0EXRms0OO6043EgKNk9qlM…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDX6ezOVsLROtEOqiy70nYUZ6D654JNyeNLYuYhjNcC1Md/tBNDeNS8LwAGoHKuwV/OJzaT0FVilAJNmwz5isChhV…

selectors probed

Certificate (current)

WE1

from 2026-04-08 to 2026-07-07

Expires in 48 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.brightpay.co.uk/

findings

missing HSTS
missing Content Security Policy
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy