Summary of auth.aave.com [Desktop version] Website Security Test
Provided "as is" without any warranty of any kind.
Date/Time:Nov 6th, 2026 10:58 GMT+0
Server IP:3.33.238.178
Reverse DNS:ac4b547508e00da8e.awsglobalaccelerator.com
Location:Mount Hope, United States
Version:for desktop
Your final score:
- A
- B
- C
- F
A
It appears that system is not responding or blocking software fingerprinting attempts, performed from the following IP ranges: 192.175.111.224/27, 64.15.129.96/27, 70.38.27.240/28, 72.55.136.144/28. Please whitelist them for successful continuation of the test.
Misconfiguration or weakness
Test Results Summary for auth.aave.com
- No third-party web software dependancies were identified. Software fingerprinting may be restricted by the system, so the results could be incomplete. Show details.
- Potential GDPR compliance issues were identified related to Cookie Disclaimer. Website Security check may be incomplete because fingerprinting attempts appear to be blocked. Show details.
- The website is non-compliant with PCI DSS Requirement 6.4. The assessment of PCI DSS Requirement 6.3 may be incomplete due to limited software fingerprinting. Show details.
- Issues were identified with key security headers: missing X-Frame-Options; misconfigured Content-Security-Policy. Optional HTTP headers appear to be properly configured: Server, Referrer-Policy, Cache-Control. Deprecated HTTP headers detected: X-XSS-Protection. Show details.
- Content-Security-Policy is enforced but configuration issues were identified: overly permissive directives, directive errors. A report-only Content-Security-Policy is not present. Show details.
- 2 cookies detected; JSESSIONID have security or privacy-related configuration issues. Show details.
- 13 external requests detected; all requests completed successfully. SRI is implemented for 5 out of 6 third-party JavaScript and CSS files. Show details.
- 3 robots.txt rules and 3 bot protection mechanisms detected. No protection detected via User-Agent blocks or meta restrictions. Show details.
Compliance Summary for auth.aave.com
- GDPR Compliance Failed: Potential GDPR compliance issues were identified related to Cookie Disclaimer. Website Security check may be incomplete because fingerprinting attempts appear to be blocked.
- PCI DSS Compliance Failed: The website is non-compliant with PCI DSS Requirement 6.4. The assessment of PCI DSS Requirement 6.3 may be incomplete due to limited software fingerprinting.
