Grade A — 2 minor.
passive scan · the deep checks need you signed in · scanned 2h ago
This is a passive website security report for checkpoint-edu.ch, graded A (96/100). We checked its SSL certificate, HTTP security headers, DNS records, email spoofing protection and publicly exposed files — the same surface a browser and a search engine already see.
We found 2 issues on this scan — each has a plain-English explanation and a copy-paste fix below.
Not your site?
You have a Content-Security-Policy, which is great — but it contains a wildcard source or allows 'unsafe-inline'/'unsafe-eval' in script-src. Those let injected scripts execute, which is most of what a CSP is meant to stop.
checkpoint-edu.ch publishes no CAA records. CAA tells the world which certificate authorities are allowed to issue HTTPS certificates for your domain. Without it, any CA can be persuaded to issue a cert for your domain, which widens the door to mis-issuance.
Sign up to fix these — then run the checks a passive scan can't. The stuff that actually gets vibe-coded apps hacked:
free for your first app · no card
Not checkpoint-edu.ch? Scan your own site free →