Example website security reports

Each report is a live snapshot of SSL, HTTPS and core security headers for a public website. These pages are meant to give teams a quick signal on basic web security posture. Click any site below to view its full Breachless report.

General / misc(4 sites)

Craigslist
craigslist.org
Almost always missing CSP, HSTS, Permissions Policy — usually scores F.
View security report
Weebly
weebly.com
Historically poor security headers (F/D).
View security report
GoDaddy
godaddy.com
Large audience; header score often D.
View security report
Quora
quora.com
Missing key policies; great SEO target.
View security report

Media & news(3 sites)

ESPN
espn.com
Legacy infrastructure; missing several modern security headers.
View security report
Fox News
foxnews.com
Missing CSP and Permissions Policy, predictable F score.
View security report
BBC
bbc.com
Weak header posture; CSP missing.
View security report

Education(1 site)

Harvard University
harvard.edu
Weak security headers despite strong brand — great for SEO and outreach.
View security report

Sports(1 site)

NBA
nba.com
Typically missing 4–5 security headers.
View security report

Finance(6 sites)

MarketWatch
marketwatch.com
Fails several header checks — reliable F.
View security report
CoinMarketCap
coinmarketcap.com
Weak CSP; large search volume.
View security report
Kraken Exchange
kraken.com
SSL strong; missing modern headers.
View security report
SoFi
sofi.com
Popular fintech; header score usually D.
View security report
Venmo
venmo.com
Missing Permissions-Policy.
View security report
Mint
mint.com
Good SSL, weak header setup.
View security report

Weather & info(1 site)

Weather.com
weather.com
Often D or F due to missing essential headers.
View security report

Portals(1 site)

MSN
msn.com
Missing multiple headers; common F.
View security report

Entertainment(1 site)

IMDb
imdb.com
Missing CSP and HSTS — frequently fails.
View security report

AI & LLM startups(5 sites)

Midjourney
midjourney.com
Popular AI tool, often minimal headers.
View security report
Claude / Anthropic
claude.ai
Security headers vary by region.
View security report
Perplexity AI
perplexity.ai
Very high growth; good SEO target.
View security report
Runway ML
runwayml.com
Creative AI; header score typically C or D.
View security report
Character AI
character.ai
Weak CSP; common SEO query target.
View security report

Want to see your own site? Run a free audit from the Breachless homepage.