Compliance reports

Payment Card Industry Data Security Standard. Required if you process, store, or transmit cardholder data. Our scan maps to PCI DSS 4.0 requirements for web application security.

Checks mapped: SSL/TLS strength, security headers, injection prevention, access controls, secret management

EU privacy evidence mapping for consent, policy disclosures, trackers, public legal surfaces, and bounded accessibility basics. Results are technical observations, not a legal opinion or compliance certification.

Checks mapped: Cookie consent, privacy-policy controller/contact/retention/rights, third-party trackers, same-origin Terms availability, and explicit unavailable/needs-auth states

Service Organization Control 2. Focuses on security, availability, processing integrity, confidentiality, and privacy. Our report maps scan findings to SOC 2 Trust Services Criteria.

Checks mapped: Public session controls, TLS, CORS, security headers, exposed artifacts, and WAF observations

Technical evidence mapping for selected HIPAA safeguards. A public web scan cannot verify PHI handling, encryption at rest, internal access controls, policies, or legal compliance.

Checks mapped: TLS transport, public session-cookie flags, security headers, CORS, and sensitive-file exposure

Technical evidence mapping for selected ISO/IEC 27001:2022 Annex A controls. Organizational, physical, personnel, and ISMS operating evidence remain outside a public web scan.

Checks mapped: TLS cryptography, public network exposure, application headers, CORS, cookies, and exposed artifacts