Summary of www.krea.ai [Desktop version] Website Security Test
Provided "as is" without any warranty of any kind.
Date/Time:Nov 5th, 2026 18:54 GMT+0
Server IP:104.20.45.120
Reverse DNS:-
Location:N/A
Version:for desktop
Your final score:
- A
- B
- C
- F
A
Test Results Summary for www.krea.ai
- One third-party web software dependancy was identified. It appears to be outdated, but no known vulnerabilities were detected. No Content Management System (CMS) was identified. One CMS component, JS-library or framework was identified: core-js. Show details.
- Potential GDPR compliance issues were identified related to Cookie Disclaimer. Show details.
- No obvious PCI DSS compliance issues were detected for Requirements 6.3 and 6.4. Show details.
- Issues were identified with key security headers: missing X-Content-Type-Options, X-Frame-Options; misconfigured Content-Security-Policy. Optional HTTP headers appear to be properly configured: Server, Cache-Control. Show details.
- Content-Security-Policy is enforced but configuration issues were identified: overly permissive directives, directive errors, deprecated directives. A report-only Content-Security-Policy is not present. Show details.
- 11 cookies detected; ph_phc_kyzaz2uOZkTGjBpixpJPev9B8cusob2snVtgYXoIn96_posthog, __hssrc, _gcl_au, hubspotutk, __hstc, krea_basic_plan_device_id, __hssc have security or privacy-related configuration issues. Show details.
- 120 external requests detected; 46 requests failed. SRI is not used for 20 third-party JavaScript and CSS files. Show details.
- 12 User-Agent blocks and 9 bot protection mechanisms detected. No protection detected via robots.txt rules or meta restrictions. Additional anti-scraping protection appears to be provided by external infrastructure. Show details.
Compliance Summary for www.krea.ai
- GDPR Compliance Failed: Potential GDPR compliance issues were identified related to Cookie Disclaimer.
- PCI DSS Compliance Passed: No obvious PCI DSS compliance issues were detected for Requirements 6.3 and 6.4.
