Summary of help.bfl.ai [Desktop version] Website Security Test
Provided "as is" without any warranty of any kind.
Date/Time:Nov 5th, 2026 18:08 GMT+0
Server IP:3.161.213.128
Reverse DNS:server-3-161-213-128.yul62.r.cloudfront.net
Location:Mount Hope, United States
Version:for desktop
Your final score:
- A
- B
- C
- F
A
Test Results Summary for help.bfl.ai
- No third-party web software dependancies were identified. Show details.
- No obvious GDPR-related compliance issues were detected across Privacy Policy, Website Security, TLS Encryption, Cookie Protection, Cookie Disclaimer. The following checks were not performed, as no corresponding cookies with personal or tracking information seem to be sent by the website: Website Security, Cookie Protection, Cookie Disclaimer. Show details.
- The website is compliant with PCI DSS Requirement 6.3, while being non-compliant with Requirement 6.4. Show details.
- Issues were identified with key security headers: missing X-Frame-Options; misconfigured Content-Security-Policy. Optional HTTP header appears to be properly configured: Cache-Control. Show details.
- Content-Security-Policy is enforced but configuration issues were identified: directive errors, overly permissive directives. A report-only Content-Security-Policy is not present. Show details.
- No cookies were detected. Show details.
- 11 external requests detected; all requests completed successfully. Show details.
- 12 robots.txt rules, 6 User-Agent blocks and 10 bot protection mechanisms detected. No protection detected via meta restrictions. Show details.
- DNS CNAME record detected; DNSSEC signatures are not present. Show details.
Compliance Summary for help.bfl.ai
- PCI DSS Compliance Failed: The website is compliant with PCI DSS Requirement 6.3, while being non-compliant with Requirement 6.4.
- PDF Certificate and Badge
- Web Server Configuration Test
- Web Software Security Test
- GDPR Compliance Test
- PCI DSS Compliance Test
- HTTP Headers Security Test
- Content Security Policy (CSP) Test
- Cookies Privacy and Security Test
- External Content Security Test
- Protection from Data Scraping Test
- DNSSEC Configuration Test


