Is gethelpnow.in safe to use as a vendor?

gethelpnow.in scored 79/100 on LynxRadar's security posture assessment. The domain partially meets security requirements with some gaps to address. 7 checks passed, 1 warnings, 2 critical issues across 10 passive checks including TLS, DMARC, security headers, breaches, and CVEs.

What TLS version does gethelpnow.in use?

gethelpnow.in uses TLSv1.3 with TLS_AES_256_GCM_SHA384. TLSv1.3 negotiated with TLS_AES_256_GCM_SHA384 (256-bit). Strong configuration with no deprecated protocols or weak ciphers detected.

Does gethelpnow.in have DMARC configured?

Yes. gethelpnow.in's DMARC policy is set to 'reject'. SPF record: yes. Strengths: DMARC policy set to reject (strongest); DMARC pct=100 — policy applies to all mail; DKIM alignment: strict (adkim=s); SPF alignment: strict (aspf=s); Aggregate reports (rua) configured; SPF soft-fail (~all) configured; SPF DNS lookup count: 1/10 (within limit); DKIM configured (selectors: google, s1, s2).

Does gethelpnow.in have SPF configured?

Yes. SPF record: v=spf1 include:_spf.google.com ~all

Does gethelpnow.in have security headers configured?

gethelpnow.in has 2 of 5 recommended security headers. Present: X-Content-Type-Options, X-Frame-Options. Missing: CSP, Referrer-Policy, Permissions-Policy.

Has gethelpnow.in been involved in a data breach?

No known breaches found. No known breaches found in public disclosure databases.

Does gethelpnow.in have known CVE vulnerabilities?

Detected technologies: nginx/1.24.0. No high or critical CVEs found for detected versions.

Is gethelpnow.in's SSL certificate valid?

Yes. Strengths: Certificate valid, 63 days remaining; Issued by Let's Encrypt.

gethelpnow.in Security Report — Grade C+ (79/100)

Q: Does gethelpnow.in use HSTS?

No. Strict-Transport-Security header is missing. Connections can be downgraded to HTTP via man-in-the-middle attacks.

Q: Does gethelpnow.in have DNSSEC enabled?

No. Strengths: 2 nameservers configured (ns32.domaincontrol.com., ns31.domaincontrol.com.); 5 MX records present; Zone transfers properly restricted. Issues: DNSSEC not configured — DNS responses can be spoofed.

C+

Trust rating

Fair · 79/100

Procurement snapshot

0 critical findings identified — these point to architectural gaps, not just configuration tweaks.

Strengths

Known Breaches

DMARC / Email Security

MX Records & Mail Provider

TLS Configuration

Questions to ask

Confirm DNSSEC rollout timeline

Estimated remediation effort: 1–3 days

Based on a passive external scan — supplement with vendor-provided attestations, not a replacement.

Trust Score Trend

→ No change 1 scan · Last scanned February 18, 2026

Your rating Industry average

Score

100 75 50 25 0

C+

gethelpnow.in

79/100

Compliance & Certifications

Not yet verified

HIPAA

BAA not on file

Self-reported

HITRUST

Certificate not on file

3rd party

SOC 2 Type II

Audit report not on file

3rd party · AICPA

Incident History

No public breaches on record

Security Posture

3 items need attention

7 passed

Turn on HSTS (forces browsers to always use HTTPS)

HSTS Header

< 1 hour High

This puts visitor logins and session data at risk of interception on untrusted networks. gethelpnow.in doesn't send the HSTS header, so a browser can still be tricked into connecting over plain, unencrypted HTTP instead of HTTPS — an attacker on the same network (e.g. public wifi) can exploit that gap to intercept traffic. Turning HSTS on tells every browser "always use HTTPS for this site, no exceptions."

PCI-DSS 4.0Req 6.4.1

Required application security controls

NIST 800-53SC-8

Transmission confidentiality and integrity

How to fix this

1Add this response header to your site. If you manage your own server (nginx, Apache, IIS) or a CDN like Cloudflare, add it in that config. If your site is on a managed platform (Wix, Squarespace, Shopify, WordPress.com), search their help center for "custom headers" or ask their support — most support it, though a few don't.

Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

2Before adding it, make sure every subdomain (not just the main site) also works over HTTPS — HSTS applies site-wide.

3Confirm it's live: search "http header checker" and enter gethelpnow.in.

4Once confirmed, submit the domain at hstspreload.org so browsers enforce HTTPS even on a user's very first visit.

HSTS guide

Report unlocked.

View all 7 passed checks

Known Breaches

DMARC / Email Security

MX Records & Mail Provider

TLS Configuration

CVE Exposure

Certificate Hygiene

Subprocessors & Tech Stack

Company Signals

Operational risk

Last funding

Employees

Trust Resources

Claim profile →

Trust Center

Not detected

DPA (Data Processing Agreement)

Subprocessors List

Similar companies in Healthcare / Health Tech

Appears in

Healthcare / Health Tech vendors

138 companies scanned by LynxRadar

Vendors graded C

699 companies · LynxRadar ranking

Blocking Issues

Not enabled

Strict-Transport-Security header is missing. Connections can be downgraded to HTTP via man-in-the-middle attacks.

Likelihood: ★★★☆☆

Impact: ★★★★☆

2/5 present

Missing: CSP, Referrer-Policy, Permissions-Policy

Likelihood: ★★★☆☆

Impact: ★★★☆☆

Medium Priority

Not enabled

Strengths: 2 nameservers configured (ns32.domaincontrol.com., ns31.domaincontrol.com.); 5 MX records present; Zone transfers properly restricted. Issues: DNSSEC not configured — DNS responses can be spoofed.

Likelihood: ★★☆☆☆

Impact: ★★★☆☆