www.brown.edu Website Security Test

Summary of www.brown.edu [Desktop version] Website Security Test

Provided "as is" without any warranty of any kind.

Date/Time:Oct 3rd, 2026 06:27 GMT+0

Server IP:104.18.3.173

Reverse DNS:-

Location:N/A Unknown

Version:for desktop

Your final score:

A
B
C
F

B

This test was made 37 days ago and may be outdated

Refresh Test

It appears that system is not responding or blocking software fingerprinting attempts, performed from the following IP ranges: 192.175.111.224/27, 64.15.129.96/27, 70.38.27.240/28, 72.55.136.144/28. Please whitelist them for successful continuation of the test.

Misconfiguration or weakness

Test Results Summary for www.brown.edu

Web Software Security Test
3 third-party web software dependancies were identified, including one outdated dependancy. No known vulnerabilities were detected. One identified third-party web software dependancy has an unknown version. The identified CMS (Drupal) appears to be outdated. The following CMS components, JS-libraries or frameworks were identified: jquery, hammer.js. Software fingerprinting may be restricted by the system, so the results could be incomplete. Show details.
GDPR Compliance Test
Potential GDPR compliance issues were identified related to Cookie Disclaimer. Website Security check may be incomplete due to a scanning timeout. Show details.
PCI DSS Compliance Test
No obvious PCI DSS compliance issues were detected for Requirements 6.3 and 6.4. Show details.
HTTP Headers Security Test
Issues were identified with key security header missing Content-Security-Policy. Optional HTTP headers appear to be properly configured: Server, Cache-Control. Show details.
Content Security Policy (CSP) Test
Content-Security-Policy headers are not present. Show details.
Cookies Privacy and Security Test
5 cookies detected; _ga_QY13L4Q0C0, _ga_PCH3TG4K4L, _ga, _ga_S0MX9K9C18, _gcl_au have security or privacy-related configuration issues. Show details.
External Content Security Test
20 external requests detected; 5 requests failed. SRI is not used for 7 third-party JavaScript and CSS files. Show details.
Protection from Data Scraping Test
No significant anti-scraping protections were detected. Additional anti-scraping protection appears to be provided by external infrastructure. Show details.
DNSSEC Configuration Test
DNS CNAME record detected; DNSSEC signatures are not present. Show details.

Compliance Summary for www.brown.edu

GDPR Compliance Failed: Potential GDPR compliance issues were identified related to Cookie Disclaimer. Website Security check may be incomplete due to a scanning timeout.
PCI DSS Compliance Passed: No obvious PCI DSS compliance issues were detected for Requirements 6.3 and 6.4.