77/100 SECURITY SCORE

Certificate Information

Subject
CN=imperva.com
Issuer
C=BE, O=GlobalSign nv-sa, CN=GlobalSign Atlas R46 DV TLS CA 2026 Q3
Valid From
August 31, 2026
Valid Until
November 29, 2026 88 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D0:E5:B8:84:EE:76:8B:C9:27:7D:DA:FE:F0:6F:75:99:70:05:40:D9:7E:5E:58:3D:DF:85:2F:20:36:19:6C:41
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31536000
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

109 domains
api-uat.pulse.wedopulse.com api.pulse.wedopulse.com

Other domains in certificate

eastspring.co.jp *.eastspring.co.jp
order.eastspring.co.th order.uat.eastspring.co.th pvd-employer.eastspring.co.th *.pvd-employer.eastspring.co.th
eastspring.com.cn www.eastspring.com.cn
eastspring.com.tw *.eastspring.com.tw
imperva.com
*.intranet.asia
joinpru.com.ph *.joinpru.com.ph
myeastspring.com.my *.myeastspring.com.my
mypru.info *.mypru.info
chatbot.pcalife.com.tw chatbotsit.pcalife.com.tw chatbotuat.pcalife.com.tw *.eservice.pcalife.com.tw online.pcalife.com.tw onlineuat.pcalife.com.tw pcalife.com.tw salesapp.pcalife.com.tw salesappuat.pcalife.com.tw www.pcalife.com.tw
pru-gtpt.com *.pru-gtpt.com
pruadviser.com.sg *.pruadviser.com.sg
app.prubsn.com.my app1.prubsn.com.my app2.prubsn.com.my app2uat.prubsn.com.my appuat.prubsn.com.my boardpac.prubsn.com.my mobility.prubsn.com.my mobilitysit.prubsn.com.my mobilityuat.prubsn.com.my pru-api-nprd.prubsn.com.my *.pru-api-prd.prubsn.com.my prubsn.com.my *.prubsn.com.my prubsnteman.prubsn.com.my takafulnetuat.prubsn.com.my
platform-jenkins.pruconnect.net
prudencefoundation.com *.prudencefoundation.com
affiliate-uat.prudential.co.id affiliate.prudential.co.id *.prudential.co.id pruservices-nprd.prudential.co.id
ebportal-uat.prudential.co.th prudential.co.th *.prudential.co.th pruservices-nprd.prudential.co.th
cms.prudential.co.zm paymenthistory.prudential.co.zm
*.epolicyservices.prudential.com.hk prudential.com.hk *.prudential.com.hk
cscmp-uat.prudential.com.kh cscmp.prudential.com.kh eaps.prudential.com.kh pcla-api-nprd.prudential.com.kh pcla-api-prod.prudential.com.kh prudential.com.kh *.prudential.com.kh pruleads.prudential.com.kh
cws-uat.prudential.com.mm
dr.pruwayplus.prudential.com.my *.pamb.prudential.com.my *.prudential.com.my pruwayplus.prudential.com.my
prudential.com.sg *.prudential.com.sg *.rt.prudential.com.sg sgrass-apim-nprd.prudential.com.sg tripleblind.pacs.prudential.com.sg tripleblind.uob.prudential.com.sg
*.einvoice-uat.prudential.com.vn prudential.com.vn *.prudential.com.vn thanhtoan.prudential.com.vn
prudential.la www.prudential.la
*.agency.prudential.ug api.premiums.prudential.ug *.api.premiums.prudential.ug *.finance.prudential.ug *.products.prudential.ug prudential.ug *.prudential.ug *.verify.prudential.ug web.premiums.prudential.ug *.web.premiums.prudential.ug
api-calculator.prudentiallife.co.ke api.prudentiallife.co.ke onboarding.prudentiallife.co.ke payments.prudentiallife.co.ke portal.prudentiallife.co.ke
*.eb.prulifeuk.com.ph prism-portal.prulifeuk.com.ph prulifeuk.com.ph *.prulifeuk.com.ph