Cybersecurity Rating
by ImmuniWeb® CyberScore™

Get a free cybersecurity, privacy and AI security rating of your company, partners or suppliers
Free online tool with PDF report
  • Website Security Rating
  • Website Privacy Rating
  • Encryption Security Rating
  • Email Security Rating
  • GenAI Exposure Rating
  • Dark Web Exposure
Free online tool with PDF report
63,079 organizations tested
|Provided "as is" without any warranty of any kind
21
tests
running
669
tests
in 24 hours
tests in 24 hours

Error:

Share this report:

Cybersecurity Rating of wholefoodsmarket.com

Website
Security Rating: C+
Website
Privacy Rating: B+
SSL
Security Rating: B+
Email
Security Rating: B-
GenAI
Exposure Rating: A+
Tested on November 6th, 2026 23:57 GMT+0
Website Security:Tests Finished
Website Privacy:Tests Finished
SSL Security:Tests Finished
Email Security:Test Finished
GenAI Exposure:Test Finished

Website Security Rating | Overview

Back to Top

The total number of subdomains is capped at 50.

HostnameURLGradeTested on
wholefoodsmarket.comhttps://www.wholefoodsmarket.com/CNovember 7th, 2026 00:04
www.wholefoodsmarket.comhttps://www.wholefoodsmarket.com/CNovember 7th, 2026 00:00
mi.wholefoodsmarket.comhttps://mi.wholefoodsmarket.com/C+November 7th, 2026 00:13
r.wholefoodsmarket.comhttps://www.wholefoodsmarket.com/CNovember 7th, 2026 00:12
benefits.wholefoodsmarket.comhttps://atozworkforce.idprism-auth.amazon.com/?acr_values=urn%253Aamazon%253Aidprism%253Aauth%253Amfa%253Apassword%252Botp%2Burn%253Aamazon%253Aidprism%253Aauth%253Amfa%253Awebauthn%2Burn%253Aamazon%253Afederate%253Aauth%253Apassthrough%253Apassportv1%2Burn%253Aamazon%253Afederate%253Aauth%253Apassthrough%253Adeviceflow%2Burn%253Aamazon%253Afederate%253Aauth%253Apassthrough%253Awfmazure%2Burn%253Aamazon%253Afederate%253Aauth%253Apassthrough&client_id=36eb297db69e3157c9f85ca8ad&nonce=P261107001055772IADU1DDPXGCHUHD&redirect_uri=https%3A%2F%2Fidp.federate.amazon.com%2Fapi%2Fv1%2Fintermediate&relying_party=goempyrean.com&response_type=code&scope=openid&state=us-east-1_P261107001055772IADU1DDPXGCHUHD_92b1b626-dfb4-463b-a4d0-b09416202143&txn_id=P261107001055858IADC78C8C14C4FDANovember 7th, 2026 00:14
Show 26 More

Website Privacy Rating | Overview

Back to Top

The total number of subdomains is capped at 50.

HostnameURLGradeTested on
wholefoodsmarket.comhttps://www.wholefoodsmarket.com/B-November 7th, 2026 01:04
www.wholefoodsmarket.comhttps://www.wholefoodsmarket.com/B-November 7th, 2026 01:04
mi.wholefoodsmarket.comhttps://mi.wholefoodsmarket.com/BNovember 7th, 2026 01:04
r.wholefoodsmarket.comhttps://r.wholefoodsmarket.comNNovember 7th, 2026 01:04
benefits.wholefoodsmarket.comhttps://atozworkforce.idprism-auth.amazon.com/?acr_values=urn%253Aamazon%253Aidprism%253Aauth%253Amfa%253Apassword%252Botp%2Burn%253Aamazon%253Aidprism%253Aauth%253Amfa%253Awebauthn%2Burn%253Aamazon%253Afederate%253Aauth%253Apassthrough%253Apassportv1%2Burn%253Aamazon%253Afederate%253Aauth%253Apassthrough%253Adeviceflow%2Burn%253Aamazon%253Afederate%253Aauth%253Apassthrough%253Awfmazure%2Burn%253Aamazon%253Afederate%253Aauth%253Apassthrough&client_id=36eb297db69e3157c9f85ca8ad&nonce=P261107010543808IADDNA83M1UXKXS&redirect_uri=https%3A%2F%2Fidp.federate.amazon.com%2Fapi%2Fv1%2Fintermediate&relying_party=goempyrean.com&response_type=code&scope=openid&state=us-east-1_P261107010543808IADDNA83M1UXKXS_92eb8add-445a-4103-8ebd-3fdb8174e0fc&txn_id=P261107010544047IAD4420AACEE1F3ANovember 7th, 2026 01:04
ImmuniWeb DiscoveryFull visibility of your vulnerable IT assets
with ImmuniWeb® Discovery
Show 26 More

SSL Security Rating | Overview

Back to Top

The total number of subdomains is capped at 50.

HostnameURLProtocolGradeTested on
wholefoodsmarket.comhttps://wholefoodsmarket.com
151.101.192.69:443		HTTPSB+November 6th, 2026 23:59
www.wholefoodsmarket.comhttps://www.wholefoodsmarket.com
3.161.213.4:443		HTTPSA+November 7th, 2026 00:00
mi.wholefoodsmarket.comhttps://mi.wholefoodsmarket.com
18.239.6.26:443		HTTPSA-November 7th, 2026 00:13
r.wholefoodsmarket.comhttps://r.wholefoodsmarket.com
13.225.195.165:443		HTTPSANovember 7th, 2026 00:14
benefits.wholefoodsmarket.comhttps://benefits.wholefoodsmarket.com
192.48.98.21:443		HTTPSANovember 7th, 2026 00:13
Show 26 More

Email Security Rating | Overview

Back to Top
HostnameGradeTested on
wholefoodsmarket.comB-November 7th, 2026 00:05
  • Email Server Security Report
    A total of 2 email servers were analyzed. Open relay was not detected, SMTP enumeration was not detected, a secure authentication was enforced across all tested servers, and PTR records were properly configured. The average response latency was approximately 0.048s.
  • Email SSL/TLS Encryption Report
    SSL/TLS security testing was completed for 1 email server. Server grade is F.
  • Email Server DNS Security Report
    SPF is set properly, DKIM is set properly, and DMARC is set properly. MTA-STS is not configured for this domain. A and MX DNS records are unsigned.
  • Email Server Black and Spam Lists Report
    No email servers were found on blacklists.
ImmuniWeb DiscoveryFull visibility of your vulnerable IT assets
with ImmuniWeb® Discovery

GenAI Exposure Rating

Back to Top
  • No vibe-coded or AI-created code patterns detected across 31 websites.
  • No leaks of AI tokens or other AI-related and sensitive data detected on the Dark Web.
  • No leaks of AI tokens or other AI-related and sensitive data detected across 31 websites.

Dark Web and Threat Exposure Rating | Overview

Back to Top
HostnameTested on
wholefoodsmarket.comNovember 6th, 2026 23:58
  • Dark Web Exposure Report
    A total of 484 dark web incidents detected, containing 16459 mentions of the domain. 394 out of 484 incidents originate from Compromised Databases. Out of all detected Compromised Credentials, 2201 are considered to be of High risk. Mentions in Leaked Databases represent the most common source of compromised information, accounting for 15014 of the 16459 detected domain mentions on the Dark Web.
  • Unprotected Cloud Storage Report
    A total of 1 bucket detected across 1 cloud storage provider: 1 bucket was detected in Amazon S3.
  • Phishing Websites Report
    1 potential phishing URL detected. Example hostname: wholefoodsmarket.cn.
  • Cybersquatting Domains Report
    12 potential cybersquatting domains detected. Example domains: wholefoodsmarket.io, wholefoodsmarketus.com and wholefoodsmarket.ai; additional cybersquatting domains are available in the detailed report.
  • Typosquatting Domains Report
    1 potential typosquatting domain detected. Example domain: wholegoodsmarket.com.
  • Fake Accounts in Social Media Report
    3 squatted social network accounts detected across 2 social networks. Most affected social networks include Reddit with 2 accounts including @wholefoodsmarket0 and @wholefoodsmarketv and YouTube with 1 account including @wholefoodsmarketna; the full list is available in the detailed report.
ImmuniWeb DiscoveryFull visibility of your stolen data
with ImmuniWeb® Discovery
Share this report:

Upgrade to ImmuniWeb® AI Platform

Take Your Security Ratings to the Next Level
Continuous Threat Exposure Management
Continuous Threat
Exposure Management
with ImmuniWeb® Discovery
Web Application Penetration Testing
Web Application
Penetration Testing
with ImmuniWeb® On-Demand
Continuous Web Scanning and Penetration Testing
Continuous Web Scanning
and Penetration Testing
with ImmuniWeb® Continuous
FREE DEMO
Corporate Datasheet [PDF]