Summary of idp-staging.apiiro.com [Desktop version] Website Security Test
Provided "as is" without any warranty of any kind.
Date/Time:Nov 6th, 2026 14:51 GMT+0
Server IP:34.160.170.157
Reverse DNS:157.170.160.34.bc.googleusercontent.com
Location:Kansas City, United States
Version:for desktop
Your final score:
- A
- B
- C
- F
A
It appears that system is not responding or blocking software fingerprinting attempts, performed from the following IP ranges: 192.175.111.224/27, 64.15.129.96/27, 70.38.27.240/28, 72.55.136.144/28. Please whitelist them for successful continuation of the test.
Misconfiguration or weakness
Test Results Summary for idp-staging.apiiro.com
- No third-party web software dependancies were identified. Software fingerprinting may be restricted by the system, so the results could be incomplete. Show details.
- Potential GDPR compliance issues were identified related to Privacy Policy. Website Security check may be incomplete because fingerprinting attempts appear to be blocked. Show details.
- The website is non-compliant with PCI DSS Requirement 6.4. The assessment of PCI DSS Requirement 6.3 may be incomplete due to limited software fingerprinting. Show details.
- Issues were identified with key security header misconfigured Content-Security-Policy. Optional HTTP headers appear to be properly configured: Referrer-Policy, Cache-Control, X-Permitted-Cross-Domain-Policies, Cross-Origin-Resource-Policy (CORP), Cross-Origin-Opener-Policy (COOP). Deprecated HTTP headers detected: X-XSS-Protection. Show details.
- Content-Security-Policy is enforced and appears to be properly configured. A report-only Content-Security-Policy is not present. Show details.
- No cookies were detected. Show details.
- 2 external requests detected; all requests completed successfully. SRI is not used for one third-party JavaScript or CSS file. Show details.
- No significant anti-scraping protections were detected. Show details.
Compliance Summary for idp-staging.apiiro.com
- GDPR Compliance Failed: Potential GDPR compliance issues were identified related to Privacy Policy. Website Security check may be incomplete because fingerprinting attempts appear to be blocked.
- PCI DSS Compliance Failed: The website is non-compliant with PCI DSS Requirement 6.4. The assessment of PCI DSS Requirement 6.3 may be incomplete due to limited software fingerprinting.
