Summary of mobileapps.usaa.com [Desktop version] Website Security Test
Provided "as is" without any warranty of any kind.
Date/Time:Nov 6th, 2026 10:43 GMT+0
Server IP:184.25.135.230
Reverse DNS:a184-25-135-230.deploy.static.akamaitechnologies.com
Location:Montreal, Canada
Version:for desktop
Your final score:
- A
- B
- C
- F
A
Test Results Summary for mobileapps.usaa.com
- No third-party web software dependancies were identified. Show details.
- Potential GDPR compliance issues were identified related to Cookie Disclaimer. The following checks were not performed, as no corresponding cookies with personal or tracking information seem to be sent by the website: Website Security. Show details.
- The website is compliant with PCI DSS Requirement 6.3, while being non-compliant with Requirement 6.4. Show details.
- Issues were identified with key security headers: missing Content-Security-Policy, X-Content-Type-Options, X-Frame-Options. Optional HTTP headers appear to be properly configured: Server, Cache-Control. Show details.
- Content-Security-Policy headers are not present. Show details.
- 14 cookies detected; s_sess, akmachineid, ak_esd, akusaa, bm_sz, _cls_v, _cls_s, dcenveq, ECID, AMCVS_47977B2A53A852210A490D45%40AdobeOrg, AMCV_47977B2A53A852210A490D45%40AdobeOrg, _abck, s_pers, utag_main have security or privacy-related configuration issues. Show details.
- 29 external requests detected; 2 requests failed. SRI is not used for 10 third-party JavaScript and CSS files. Show details.
- No significant anti-scraping protections were detected. Show details.
Compliance Summary for mobileapps.usaa.com
- GDPR Compliance Failed: Potential GDPR compliance issues were identified related to Cookie Disclaimer. The following checks were not performed, as no corresponding cookies with personal or tracking information seem to be sent by the website: Website Security.
- PCI DSS Compliance Failed: The website is compliant with PCI DSS Requirement 6.3, while being non-compliant with Requirement 6.4.
