Summary of careers.tesco.com [Desktop version] Website Security Test
Provided "as is" without any warranty of any kind.
Date/Time:Nov 6th, 2026 23:52 GMT+0
Server IP:3.11.208.192
Reverse DNS:ec2-3-11-208-192.eu-west-2.compute.amazonaws.com
Location:City of London, United Kingdom
Version:for desktop
Your final score:
- A
- B
- C
- F
A
Test Results Summary for careers.tesco.com
- 6 third-party web software dependancies were identified. All appear to be outdated, but no known vulnerabilities were detected. No Content Management System (CMS) was identified. The following CMS components, JS-libraries or frameworks were identified: jquery, jquery-ui, react, and others. Show details.
- No obvious GDPR-related compliance issues were detected across Privacy Policy, Website Security, TLS Encryption, Cookie Protection, Cookie Disclaimer. Show details.
- The website is compliant with PCI DSS Requirement 6.3, while being non-compliant with Requirement 6.4. Show details.
- Issues were identified with key security header misconfigured Content-Security-Policy. Optional HTTP headers appear to be properly configured: Cache-Control, Reporting-Endpoints. Show details.
- Content-Security-Policy is enforced but configuration issues were identified: overly permissive directives, directive errors. A report-only Content-Security-Policy is not present. Show details.
- 3 cookies detected; OptanonConsent, portalLanguage-21 have security or privacy-related configuration issues. Show details.
- 21 external requests detected; 2 requests failed. SRI is not used for 9 third-party JavaScript and CSS files. Show details.
- 4 User-Agent blocks and 4 bot protection mechanisms detected. No protection detected via robots.txt rules or meta restrictions. Show details.
- DNS CNAME record detected; DNSSEC signatures are not present. Show details.
Compliance Summary for careers.tesco.com
- GDPR Compliance Passed: No obvious GDPR-related compliance issues were detected across Privacy Policy, Website Security, TLS Encryption, Cookie Protection, Cookie Disclaimer.
- PCI DSS Compliance Failed: The website is compliant with PCI DSS Requirement 6.3, while being non-compliant with Requirement 6.4.
- PDF Certificate and Badge
- Web Server Configuration Test
- Web Software Security Test
- GDPR Compliance Test
- PCI DSS Compliance Test
- HTTP Headers Security Test
- Content Security Policy (CSP) Test
- Cookies Privacy and Security Test
- External Content Security Test
- Protection from Data Scraping Test
- DNSSEC Configuration Test


