indexo.dev

securitybydefault.org

.org crawl

First seen 2026-04-18 · Last seen 2026-05-12 · ok HTTP/1.1 200 2123 ms crawled 2026-05-12

DE · 78.47.85.101 · AS24940 Hetzner Online GmbH

Reputation 87/100 weak security headers no dmarc policy

sector tech type homepage

HTML metadata

Title
Cloud Security By Default
Description
The Cloud Security by Default initiative brings CSPs and their customers together in two-way conversations to validate, challenge, and support principles to establish out-of-the-box CSP offerings with appropriate baseline security by default.
Language
en

Open Graph

title
Cloud Security By Default
site name
Cloud Security By Default
description
The Cloud Security by Default initiative brings CSPs and their customers together in two-way conversations to validate, challenge, and support principles to establish out-of-the-box CSP offerings with appropriate baseline security by default.

Technology

Server
nginx
Fonts
  • Google Fonts

Third-party hosts loaded (2)

  • fonts.googleapis.com×3
  • fonts.gstatic.com×1

Social

Contact

Email

Registration

Registrar
Cloudflare, Inc.
Created
2024-10-10
Expires
2026-10-10 144 days left
Updated
2025-09-15
Name servers
  • garret.ns.cloudflare.com
  • lisa.ns.cloudflare.com

DNS records live

NS
  • garret.ns.cloudflare.com
  • lisa.ns.cloudflare.com
MX
  • 0 securitybydefault-org.mail.protection.outlook.com

Email authentication weak

SPF
v=spf1 include:spf.protection.outlook.com -all
strict (-all)
DMARC
not published
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWnRrxA3xB0WCRgJOSgeLGs4lNZ77zJ503o1DdfE65BpNdsLsSI1EzD8N9YnSjVEaB9yDaHml87vgD…
  • selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyu3BzzVcywLpYISaJ7DWOeSUZIqq40RQrEsOvwyF8CaU7/wyceAEAiVBA+ubD1l2ISAvWydscIqqAZ…
selectors probed

Certificate (current)

E7
from 2026-04-02 to 2026-07-01
Expires in 43 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://www.securitybydefault.org/

present
  • strict-transport-security
findings
  • short HSTS max-age
  • missing Content Security Policy
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
strict-transport-security
max-age=2592000

Links to (50)

Linked from (2)