Website Security Test of
www.dell.com

Test Results Summary for www.dell.com

• Web Software Security Test
  3 third-party web software dependancies were identified. All appear to be outdated, but no known vulnerabilities were detected. No Content Management System (CMS) was identified. The following CMS components, JS-libraries or frameworks were identified: jquery, core-js, core-js. Software fingerprinting may be restricted by the system, so the results could be incomplete. Show details.
• GDPR Compliance Test
  No obvious GDPR-related compliance issues were detected across Privacy Policy, Website Security, TLS Encryption, Cookie Protection, Cookie Disclaimer. Website Security check may be incomplete due to a scanning timeout. Show details.
• PCI DSS Compliance Test
  No obvious PCI DSS compliance issues were detected for Requirements 6.3 and 6.4. Show details.
• HTTP Headers Security Test
  Issues were identified with key security headers: missing X-Frame-Options; misconfigured Content-Security-Policy. An optional HTTP header may not be properly configured: Permissions-Policy. Show details.
• Content Security Policy (CSP) Test
  Content-Security-Policy is enforced but configuration issues were identified: overly permissive directives, deprecated directives, directive errors. A report-only Content-Security-Policy is not present. Show details.
• Cookies Privacy and Security Test
  79 cookies detected; _twsid, _fbp, _pin_unauth, ttcsid, _tt_enable_cookie, _uetvid, _vcr_vid, ttcsid_C9PUBU3C77U007IT7KUG, _scid_r, _sctr, _scid, _rdt_uuid, txUid, _abck, lwp, dc-ctxt, AMCVS_4DD80861515CAB990A490D45%40AdobeOrg, FPAU, s_ips, HVV, RT, cjUser, bm_sz, _cls_v, _ga_1234567890, s_vnc365, _pin_aem, d_dnb, akaas_ClearSiteData, _ga, akGD, cjConsent, at_check, s_tp, AMCV_4DD80861515CAB990A490D45%40AdobeOrg, gpv_pn, s_ecid, bm_so, _ttp, mbox, s_ppv, bm_lso, cidlid, _twpid, s_ivc, _gcl_au, s_cc, FPGSID, mktrecipe, QSI_Group, OptanonConsent, _gd_svisitor, d_vi, FPLC, s_c49, FPID, _vcr_sid_64656c6c2d70726f64, evm_cid, dell_cmp_consent, FT_GUID, _gd_visitor, _uetsid, _gd_session, ajs_anonymous_id, _cls_s, _an_uid, ORA_FPC, __qca have security or privacy-related configuration issues. Show details.
• External Content Security Test
  211 external requests detected; 7 requests failed. SRI is not used for 86 third-party JavaScript and CSS files. Show details.
• Protection from Data Scraping Test
  1 User-Agent block and 1 bot protection mechanism detected. No protection detected via robots.txt rules or meta restrictions. Show details.
• DNSSEC Configuration Test
  DNS CNAME record detected; DNSSEC signatures are not present. Show details.

Compliance Summary for www.dell.com

• PCI DSS Compliance Passed: No obvious PCI DSS compliance issues were detected for Requirements 6.3 and 6.4.