Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=imperva.com
Issuer
C=BE, O=GlobalSign nv-sa, CN=GlobalSign Atlas R46 DV TLS CA 2026 Q3
Valid From
August 31, 2026
Valid Until
November 29, 2026
88 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D0:E5:B8:84:EE:76:8B:C9:27:7D:DA:FE:F0:6F:75:99:70:05:40:D9:7E:5E:58:3D:DF:85:2F:20:36:19:6C:41
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31536000
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
109 domains
api-uat.pulse.wedopulse.com
api.pulse.wedopulse.com
eastspring.co.jp
*.eastspring.co.jp
order.eastspring.co.th
order.uat.eastspring.co.th
pvd-employer.eastspring.co.th
*.pvd-employer.eastspring.co.th
eastspring.com.cn
www.eastspring.com.cn
eastspring.com.tw
*.eastspring.com.tw
imperva.com
*.intranet.asia
joinpru.com.ph
*.joinpru.com.ph
myeastspring.com.my
*.myeastspring.com.my
mypru.info
*.mypru.info
chatbot.pcalife.com.tw
chatbotsit.pcalife.com.tw
chatbotuat.pcalife.com.tw
*.eservice.pcalife.com.tw
online.pcalife.com.tw
onlineuat.pcalife.com.tw
pcalife.com.tw
salesapp.pcalife.com.tw
salesappuat.pcalife.com.tw
www.pcalife.com.tw
pru-gtpt.com
*.pru-gtpt.com
pruadviser.com.sg
*.pruadviser.com.sg
app.prubsn.com.my
app1.prubsn.com.my
app2.prubsn.com.my
app2uat.prubsn.com.my
appuat.prubsn.com.my
boardpac.prubsn.com.my
mobility.prubsn.com.my
mobilitysit.prubsn.com.my
mobilityuat.prubsn.com.my
pru-api-nprd.prubsn.com.my
*.pru-api-prd.prubsn.com.my
prubsn.com.my
*.prubsn.com.my
prubsnteman.prubsn.com.my
takafulnetuat.prubsn.com.my
platform-jenkins.pruconnect.net
prudencefoundation.com
*.prudencefoundation.com
affiliate-uat.prudential.co.id
affiliate.prudential.co.id
*.prudential.co.id
pruservices-nprd.prudential.co.id
ebportal-uat.prudential.co.th
prudential.co.th
*.prudential.co.th
pruservices-nprd.prudential.co.th
cms.prudential.co.zm
paymenthistory.prudential.co.zm
*.epolicyservices.prudential.com.hk
prudential.com.hk
*.prudential.com.hk
cscmp-uat.prudential.com.kh
cscmp.prudential.com.kh
eaps.prudential.com.kh
pcla-api-nprd.prudential.com.kh
pcla-api-prod.prudential.com.kh
prudential.com.kh
*.prudential.com.kh
pruleads.prudential.com.kh
cws-uat.prudential.com.mm
dr.pruwayplus.prudential.com.my
*.pamb.prudential.com.my
*.prudential.com.my
pruwayplus.prudential.com.my
prudential.com.sg
*.prudential.com.sg
*.rt.prudential.com.sg
sgrass-apim-nprd.prudential.com.sg
tripleblind.pacs.prudential.com.sg
tripleblind.uob.prudential.com.sg
*.einvoice-uat.prudential.com.vn
prudential.com.vn
*.prudential.com.vn
thanhtoan.prudential.com.vn
prudential.la
www.prudential.la
*.agency.prudential.ug
api.premiums.prudential.ug
*.api.premiums.prudential.ug
*.finance.prudential.ug
*.products.prudential.ug
prudential.ug
*.prudential.ug
*.verify.prudential.ug
web.premiums.prudential.ug
*.web.premiums.prudential.ug
api-calculator.prudentiallife.co.ke
api.prudentiallife.co.ke
onboarding.prudentiallife.co.ke
payments.prudentiallife.co.ke
portal.prudentiallife.co.ke
*.eb.prulifeuk.com.ph
prism-portal.prulifeuk.com.ph
prulifeuk.com.ph
*.prulifeuk.com.ph
Other domains in certificate