95
paypal.com
Findings
7
·
1
·
0
Checks
8 passive
Executive Summary
AI-GENERATED
paypal.com scored 95/100, demonstrating a strong security posture. Minor improvements are noted below.
Positive signals: TLS Configuration, Known Breaches, DMARC / Email Security all passed.
1 action item identified, including 0 critical. The issues are configuration gaps, not architectural problems. A focused remediation effort of 2–5 days could address all findings.
Action Items
Ordered by priority · 1 items
1
Add optional security headers (X-Frame-Options, Referrer-Policy)
paypal.com has most security headers configured. Missing: X-Frame-Options, Referrer-Policy. These are best-practice additions that reduce the attack surface for client-side vulnerabilities.
Remediation Steps
1
Add: X-Frame-Options: DENY (or SAMEORIGIN if you use iframes)
2
Add: Referrer-Policy: strict-origin-when-cross-origin
3
Verify with: curl -sI https://paypal.com | grep -iE 'content-security|x-frame|x-content|referrer|permissions'
Scan Findings
Security Headers
Warning
TLS Configuration
Healthy
Known Breaches
Healthy
DMARC / Email Security
Healthy
DNS Configuration
Healthy
HSTS Header
Healthy
CVE Exposure
Healthy
Certificate Hygiene
Healthy