Summary of www.kth.se [Desktop version] Website Security Test
Provided "as is" without any warranty of any kind.
Date/Time:Nov 3rd, 2026 21:07 GMT+0
Server IP:130.237.28.40
Reverse DNS:ns-vip-01.sys.kth.se
Location:Stockholm, Sweden
Version:for desktop
Your final score:
- A
- B
- C
- F
A
It appears that system is not responding or blocking software fingerprinting attempts, performed from the following IP ranges: 192.175.111.224/27, 64.15.129.96/27, 70.38.27.240/28, 72.55.136.144/28. Please whitelist them for successful continuation of the test.
Misconfiguration or weakness
Test Results Summary for www.kth.se
- 3 third-party web software dependancies were identified, including one outdated dependancy. No known vulnerabilities were detected. No Content Management System (CMS) was identified. The following CMS components, JS-libraries or frameworks were identified: preact, jquery, bootstrap. Software fingerprinting may be restricted by the system, so the results could be incomplete. Show details.
- No obvious GDPR-related compliance issues were detected across Privacy Policy, Website Security, TLS Encryption, Cookie Protection, Cookie Disclaimer. Website Security check may be incomplete because fingerprinting attempts appear to be blocked. Show details.
- The website is non-compliant with PCI DSS Requirement 6.4. The assessment of PCI DSS Requirement 6.3 may be incomplete due to limited software fingerprinting. Show details.
- Issues were identified with key security header misconfigured Content-Security-Policy. Optional HTTP headers appear to be properly configured: Referrer-Policy, Cache-Control, Reporting-Endpoints. Deprecated HTTP headers detected: X-XSS-Protection. Show details.
- Content-Security-Policy is enforced but configuration issues were identified: overly permissive directives, directive errors, deprecated directives. A report-only Content-Security-Policy is not present. Show details.
- No cookies were detected. Show details.
- 4 external requests detected; all requests completed successfully. SRI is not used for 3 third-party JavaScript and CSS files. Show details.
- No significant anti-scraping protections were detected. Show details.
Compliance Summary for www.kth.se
- PCI DSS Compliance Failed: The website is non-compliant with PCI DSS Requirement 6.4. The assessment of PCI DSS Requirement 6.3 may be incomplete due to limited software fingerprinting.
