Summary of www.kcl.ac.uk [Desktop version] Website Security Test
Provided "as is" without any warranty of any kind.
Date/Time:Nov 3rd, 2026 20:34 GMT+0
Server IP:185.18.139.104
Reverse DNS:-
Location:Tenbury Wells, United Kingdom
Version:for desktop
Your final score:
- A
- B
- C
- F
C
It appears that system is not responding or blocking software fingerprinting attempts, performed from the following IP ranges: 192.175.111.224/27, 64.15.129.96/27, 70.38.27.240/28, 72.55.136.144/28. Please whitelist them for successful continuation of the test.
Misconfiguration or weakness
Test Results Summary for www.kcl.ac.uk
- 4 third-party web software dependancies were identified, including 4 outdated dependancies. A total of 9 known vulnerabilities were detected. No Content Management System (CMS) was identified. The following CMS components, JS-libraries or frameworks were identified: jquery, bootstrap, glide, and others. Software fingerprinting may be restricted by the system, so the results could be incomplete. Show details.
- Potential GDPR compliance issues were identified related to Privacy Policy, Website Security. Website Security check may be incomplete because fingerprinting attempts appear to be blocked. Show details.
- The website is non-compliant with PCI DSS Requirement 6.4. The assessment of PCI DSS Requirement 6.3 may be incomplete due to limited software fingerprinting. Show details.
- Issues were identified with key security headers: missing X-Content-Type-Options, X-Frame-Options; misconfigured Content-Security-Policy. Optional HTTP headers appear to be properly configured: Access-Control-Allow-Origin, Cache-Control. Show details.
- Content-Security-Policy is enforced but configuration issues were identified: directive errors. A report-only Content-Security-Policy is not present. Show details.
- No cookies were detected. Show details.
- 7 external requests detected; 1 request failed. SRI is not used for 4 third-party JavaScript and CSS files. Show details.
- 2 User-Agent blocks and 2 bot protection mechanisms detected. No protection detected via robots.txt rules or meta restrictions. Show details.
Compliance Summary for www.kcl.ac.uk
- GDPR Compliance Failed: Potential GDPR compliance issues were identified related to Privacy Policy, Website Security. Website Security check may be incomplete because fingerprinting attempts appear to be blocked.
- PCI DSS Compliance Failed: The website is non-compliant with PCI DSS Requirement 6.4. The assessment of PCI DSS Requirement 6.3 may be incomplete due to limited software fingerprinting.
