Summary of shib.york.ac.uk [Desktop version] Website Security Test
Provided "as is" without any warranty of any kind.
Date/Time:Nov 4th, 2026 11:29 GMT+0
Server IP:144.32.129.48
Reverse DNS:shibvip.york.ac.uk
Location:York, United Kingdom
Version:for desktop
Your final score:
- A
- B
- C
- F
C
It appears that system is not responding or blocking software fingerprinting attempts, performed from the following IP ranges: 192.175.111.224/27, 64.15.129.96/27, 70.38.27.240/28, 72.55.136.144/28. Please whitelist them for successful continuation of the test.
Misconfiguration or weakness
Test Results Summary for shib.york.ac.uk
- 2 third-party web software dependancies were identified, including 2 outdated dependancies. A total of 4 known vulnerabilities were detected. No Content Management System (CMS) was identified. The following CMS components, JS-libraries or frameworks were identified: jquery, requirejs. Software fingerprinting may be restricted by the system, so the results could be incomplete. Show details.
- Potential GDPR compliance issues were identified related to Website Security. Website Security check may be incomplete because fingerprinting attempts appear to be blocked. Show details.
- The website is non-compliant with PCI DSS Requirement 6.4. The assessment of PCI DSS Requirement 6.3 may be incomplete due to limited software fingerprinting. Show details.
- Issues were identified with key security headers: missing X-Content-Type-Options; misconfigured Content-Security-Policy, X-Frame-Options. Optional HTTP headers appear to be properly configured: Server, Cache-Control. Show details.
- Content-Security-Policy is enforced but configuration issues were identified: directive errors. A report-only Content-Security-Policy is not present. Show details.
- One cookie detected; __Host-JSESSIONID has security or privacy-related configuration issues. Show details.
- 10 external requests detected; all requests completed successfully. SRI is not used for one third-party JavaScript or CSS file. Show details.
- No significant anti-scraping protections were detected. Show details.
Compliance Summary for shib.york.ac.uk
- GDPR Compliance Failed: Potential GDPR compliance issues were identified related to Website Security. Website Security check may be incomplete because fingerprinting attempts appear to be blocked.
- PCI DSS Compliance Failed: The website is non-compliant with PCI DSS Requirement 6.4. The assessment of PCI DSS Requirement 6.3 may be incomplete due to limited software fingerprinting.
