S SecurityScan

Example report

What you get from a scan

This report is for a fictional WooCommerce shop. The findings, fixes and scoring are exactly what the scanner produces. Paid plans add a branded PDF of the same report and re-scan on a schedule.

demo-shop.example

Compliance & security report

example
45
Needs work
overall
42
GDPR
50
Security

Two critical issues. Fix the tracking cookies set before consent first: it is the single biggest deduction.

GDPR

Tracking cookies set before consent

✕critical

Tracking cookies present before consent: _ga, _gid, _fbp.

Fix · Block analytics and marketing scripts until the visitor actively accepts that category.

Consent banner has no reject option

!warning

Consent banner offers accept but no reject.

Fix · Provide a "Reject" control with the same prominence as "Accept".

Security

Outdated library: jquery 2.2.4

✕critical

jquery 2.2.4 is outdated (known CVEs: CVE-2019-11358, CVE-2020-11022, CVE-2020-11023).

Fix · Upgrade the library to a patched version.

Strict-Transport-Security header missing

!warning

No Strict-Transport-Security response header.

Fix · Send Strict-Transport-Security: max-age=31536000; includeSubDomains.

Content-Security-Policy header missing

!warning

No Content-Security-Policy response header.

Fix · Define a Content-Security-Policy to constrain which resources may load.

Passed

  • Privacy policy linked and reachable
  • Consent banner present
  • Valid TLS certificate, HTTP redirects to HTTPS
  • X-Frame-Options and X-Content-Type-Options set
  • Forms ask for consent before collecting data

Technical scan of publicly observable behaviour. It does not replace advice from a qualified lawyer.

See your own site’s report

Free, no account, in your inbox in minutes.

Run a free scan