92
Pass

canva.com

Security posture assessment · Scanned February 15, 2026

Findings
7 · 1 · 0
Checks
8 passive

canva.com scored 92/100, demonstrating a strong security posture. Minor improvements are noted below.

Positive signals: TLS Configuration, DMARC / Email Security, HSTS Header all passed.

1 action item identified, including 0 critical. The issues are configuration gaps, not architectural problems. A focused remediation effort of 2–5 days could address all findings.

Ordered by priority · 1 items
1
Review unverified breach disclosure
Effort: 2–4 hours   Owner: Security team
medium
canva.com appears in an unverified breach report. This may be a false positive or data aggregation error. Investigate to confirm or rule out exposure.
Remediation Steps
1
Review the breach details on haveibeenpwned.com
2
Cross-reference with internal incident records
3
If confirmed, follow breach response procedures
Known Breaches
Warning
TLS Configuration
Healthy
DMARC / Email Security
Healthy
HSTS Header
Healthy
Security Headers
Healthy
CVE Exposure
Healthy
DNS Configuration
Healthy
Certificate Hygiene
Healthy