Summary of newsroom.sephora.com [Desktop version] Website Security Test
Provided "as is" without any warranty of any kind.
Date/Time:Nov 6th, 2026 23:28 GMT+0
Server IP:52.33.141.65
Reverse DNS:ec2-52-33-141-65.us-west-2.compute.amazonaws.com
Location:Boardman, United States
Version:for desktop
Your final score:
- A
- B
- C
- F
C
The website has at least one folder with enabled directory listing, putting its content at risk.
Misconfiguration or weakness
Test Results Summary for newsroom.sephora.com
- 12 third-party web software dependancies were identified, including 7 outdated dependancies. One known vulnerability was detected. 3 identified third-party web software dependancies have unknown versions. The CMS (WordPress) was identified, however, its version could not be determined. The following CMS components, JS-libraries or frameworks were identified: js-cookie, jquery, isotope, and others. Show details.
- Potential GDPR compliance issues were identified related to Website Security, Cookie Disclaimer. Show details.
- The website is compliant with PCI DSS Requirement 6.4, while being non-compliant with Requirement 6.3. Show details.
- All key security headers are missing. An optional HTTP header may not be properly configured: Server. Show details.
- Content-Security-Policy headers are not present. Show details.
- 3 cookies detected; _ga, _ga_QV3W3TSVX6, cmplz_banner-status have security or privacy-related configuration issues. Show details.
- 12 external requests detected; 1 request failed. SRI is not used for 3 third-party JavaScript and CSS files. Show details.
- No significant anti-scraping protections were detected. Show details.
- DNS CNAME record detected; DNSSEC signatures are not present. Show details.
Compliance Summary for newsroom.sephora.com
- GDPR Compliance Failed: Potential GDPR compliance issues were identified related to Website Security, Cookie Disclaimer.
- PCI DSS Compliance Failed: The website is compliant with PCI DSS Requirement 6.4, while being non-compliant with Requirement 6.3.
