Summary of rivian.com [Desktop version] Website Security Test
Provided "as is" without any warranty of any kind.
Date/Time:Nov 5th, 2026 22:14 GMT+0
Server IP:13.225.196.111
Reverse DNS:server-13-225-196-111.yul62.r.cloudfront.net
Location:Mount Hope, United States
Version:for desktop
Your final score:
- A
- B
- C
- F
A
Test Results Summary for rivian.com
- 7 third-party web software dependancies were identified. All appear to be outdated, but no known vulnerabilities were detected. No Content Management System (CMS) was identified. The following CMS components, JS-libraries or frameworks were identified: next.js, preact, core-js, and others. Show details.
- Potential GDPR compliance issues were identified related to Cookie Disclaimer. Show details.
- No obvious PCI DSS compliance issues were detected for Requirements 6.3 and 6.4. Show details.
- Issues were identified with key security header misconfigured Content-Security-Policy. Optional HTTP headers appear to be properly configured: Server, Referrer-Policy, Cache-Control. Deprecated HTTP headers detected: X-XSS-Protection. Show details.
- Content-Security-Policy is enforced but configuration issues were identified: overly permissive directives, directive errors. A report-only Content-Security-Policy is not present. Show details.
- 14 cookies detected; riv-detected-location, _swb_consent_, riv-ld-context-v3, _swb, _uetmsdns, spCookieExtensionService, _dd_s, _sp_ses.7c05, _ketch_consent_v1_, _sp_id.7c05, global-chat-state, a-sess, _tq_id.TV-5418458154-1.7c05 have security or privacy-related configuration issues. Show details.
- 110 external requests detected; all requests completed successfully. SRI is implemented for 1 out of 27 third-party JavaScript and CSS files. Show details.
- No significant anti-scraping protections were detected. Show details.
- 4 DNS A records detected; DNSSEC signatures are not present. Show details.
Compliance Summary for rivian.com
- GDPR Compliance Failed: Potential GDPR compliance issues were identified related to Cookie Disclaimer.
- PCI DSS Compliance Passed: No obvious PCI DSS compliance issues were detected for Requirements 6.3 and 6.4.
- PDF Certificate and Badge
- Web Server Configuration Test
- Web Software Security Test
- GDPR Compliance Test
- PCI DSS Compliance Test
- HTTP Headers Security Test
- Content Security Policy (CSP) Test
- Cookies Privacy and Security Test
- External Content Security Test
- Protection from Data Scraping Test
- DNSSEC Configuration Test
