Breachless security report

Security report for sofi.com

This report summarises SSL, HTTPS and core security headers for your public website.

Overall scoreA93/100

Headers checked: 6 total, 1 missing.

SSL status: Valid

This score is meant as a quick signal, not a full penetration test. It highlights basic misconfigurations that are usually easy to fix.

HTTPS and SSL

Valid
Yes
Issuer
GoDaddy.com, Inc.
Expires
2026-12-08
Days remaining
318

Security headers

  • Content-Security-PolicyMissing
  • Strict-Transport-SecurityPresent
  • X-Frame-OptionsPresent
  • X-Content-Type-OptionsPresent
  • Referrer-PolicyPresent
  • Permissions-PolicyPresent