Is threshold.network safe to use as a vendor?

threshold.network scored 75/100 on LynxRadar's security posture assessment. The domain partially meets security requirements with some gaps to address. 6 checks passed, 0 warnings, 2 critical issues across 8 passive checks including TLS, DMARC, security headers, breaches, and CVEs.

Does threshold.network have SPF configured?

Yes. SPF record: v=spf1 include:_spf.google.com -all

Does threshold.network have security headers configured?

threshold.network has 2 of 5 recommended security headers. Present: CSP, X-Frame-Options. Missing: X-Content-Type-Options, Referrer-Policy, Permissions-Policy.

threshold.network Security Report — Grade C (75/100)

Q: What TLS version does threshold.network use?

threshold.network uses TLSv1.3 with TLS_AES_256_GCM_SHA384. TLSv1.3 negotiated with TLS_AES_256_GCM_SHA384 (256-bit). Strong configuration with no deprecated protocols or weak ciphers detected.

Q: Does threshold.network have DMARC configured?

Yes. threshold.network's DMARC policy is set to 'none'. SPF record: yes. Strengths: SPF record present with hard-fail (-all). Issues: DMARC policy is 'none' (monitoring only, no enforcement); No DKIM records found for common selectors (domain may use custom selectors — this is not a confirmed gap).

Q: Does threshold.network use HSTS?

Yes. HSTS enabled: max-age=31536000. Missing includeSubDomains. Missing preload directive.

Q: Is threshold.network's SSL certificate valid?

Yes. Strengths: Certificate valid, 49 days remaining; Issued by Google Trust Services.

Q: Does threshold.network have DNSSEC enabled?

Yes. Strengths: 2 nameservers configured (vick.ns.cloudflare.com., nora.ns.cloudflare.com.); 5 MX records present; DNSSEC enabled; Zone transfers properly restricted.

C 75/100

threshold.network

February 18, 2026 ·

1 Critical 0+ Warnings 6 Passed

AI Summary

threshold.network scored 75/100, meeting baseline requirements but with 0 findings that require attention. The vendor can proceed with a remediation timeline agreement.

Critical gaps in: DMARC / Email Security, Security Headers. Positive signals: Known Breaches, DNS Configuration, TLS Configuration all passed.

2 action items identified, including 1 critical. The issues are configuration gaps, not architectural problems. A focused remediation effort of 2–5 days could address all findings.

Better than 55% of 2692 companies scanned.

055th pct100

A+

A-

B+

B-

C+

C-

D+

D-

threshold.network

75/100

0 of 1 fixed

All 1 critical issue marked as fixed

Re-scan to confirm and update your score.

Set up email authentication (DKIM)

1–2 days

Without email authentication, anyone can send emails that appear to come from threshold.network. This is the most common vector for phishing attacks targeting employees and customers. DKIM is not configured.

NIST CSFPR.AC-7

Email authentication is a required access control

ISO 27001A.13.2.1

Information transfer policies require email security controls

HIPAA§164.312(e)

Transmission security for electronic PHI

How to fix this

1Add SPF record to DNS: v=spf1 include:_spf.google.com ~all (adjust for your email provider)

2Configure DKIM signing with your email provider and publish the public key in DNS

3Add DMARC record: v=DMARC1; p=quarantine; rua=mailto:[email protected]

4Monitor DMARC reports for 2–4 weeks, then upgrade policy to p=reject

At a glance

Full data from this scan

TLS Version

TLSv1.3

TLSv1.3 negotiated with TLS_AES_256_GCM_SHA384 (256-bit). Strong configuration with no deprecated protocols or weak ciphers detected.

DMARC Policy

p=none

Strengths: SPF record present with hard-fail (-all). Issues: DMARC policy is 'none' (monitoring only, no enforcement); No DKIM records found for common selectors (domain may use custom selectors — this is not a confirmed gap).

SPF Record

Present

v=spf1 include:_spf.google.com -all

Security Headers

2/5 present

Missing: X-Content-Type-Options, Referrer-Policy, Permissions-Policy

HSTS

Enabled

HSTS enabled: max-age=31536000. Missing includeSubDomains. Missing preload directive.

SSL Certificate

Valid

Strengths: Certificate valid, 49 days remaining; Issued by Google Trust Services.

DNSSEC

Enabled

Strengths: 2 nameservers configured (vick.ns.cloudflare.com., nora.ns.cloudflare.com.); 5 MX records present; DNSSEC enabled; Zone transfers properly restricted.

Similar companies