Open
Cached
·
just now
83/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=imperva.com
Issuer
C=BE, O=GlobalSign nv-sa, CN=GlobalSign Atlas R46 DV TLS CA 2026 Q2
Valid From
July 22, 2026
Valid Until
October 20, 2026
83 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
1B:A8:5B:67:D9:56:51:3C:79:8F:D0:B5:6B:44:A0:8D:6D:8B:C6:82:A3:C4:83:E8:37:1E:60:3C:FA:69:50:A8
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31536000
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
88 domains
peopleadmin.com
*.peopleadmin.com
*.faculty.peopleadmin.com
*.sandboxfaculty.peopleadmin.com
*.services.peopleadmin.com
*.accelaschool.com
*.budgetbook.demo.allovue.app
*.atrieveerp.com
chalk.com
*.chalk.com
customschoolapps.net
*.customschoolapps.net
*.daytonpublic.com
decisioninsite.com
*.decisioninsite.com
*.dps.k12.oh.us
hobsons.com
*.hobsons.com
*.woodlandjusd-ce.hoonuit.com
imperva.com
*.infosnap.com
naviance.com
*.naviance.com
*.nps.neverskip.com
*.neverskip.net
nskc.in
*.nskc.in
*.powerschool-docs.com
*.52.32.110.168.powerschool.com
*.bp.powerschool.com
*.bthdev.powerschool.com
*.businessplus.demo.powerschool.com
*.businessplus.powerschool.com
*.ca.powerschool.com
*.canada.powerschool.com
*.efinanceplus.demo.powerschool.com
*.efinanceplus.powerschool.com
*.erp.powerschool.com
*.eschoolplus.powerschool.com
*.iep.powerschool.com
*.insights.powerschool.com
*.int.powerschool.com
mobile.ca.powerschool.com
*.pasi.maps.powerschool.com
*.pasi.powerschool.com
*.pea.ca.powerschool.com
*.pea.powerschool.com
*.pl.ca.powerschool.com
*.platform.powerschool.com
*.powerschool.com
*.prod.powerschool.com
*.registration.powerschool.com
*.reporting.powerschool.com
*.sfe.powerschool.com
*.specialeducation.ca.powerschool.com
specialeducation.powerschool.com
*.specialeducation.powerschool.com
stage-interventions.specialeducation.powerschool.com
*.staging-pea.powerschool.com
static-test.specialeducation.powerschool.com
*.support.powerschool.com
teamcity.registration.powerschool.com
*.veracode.powerschool.com
*.auto.powerschoolcorp.com
*.dashboard.dex.powerschoolcorp.com
*.dv-use-01-env1.unified.powerschoolcorp.com
*.perf.powerschoolcorp.com
*.pl.powerschoolcorp.com
*.powerschoolcorp.com
*.pscc.powerschoolcorp.com
*.staging-usw2-01-env1.unified.powerschoolcorp.com
*.app.schoology.com
schoology.com
*.schoology.com
*.cf2025.schoolspring.com
*.employer.schoolspring.com
*.talent.schoolspring.com
*.www.schoolspring.com
*.talent.schoolspringstaging.com
*.talent.schoolspringtest.com
*.spihost.com
*.spihost.net
*.teachermatch.org
tedk12staging.com
*.tedk12staging.com
tedk12test.com
*.tedk12test.com
*.versifit.com
Other domains in certificate