BENCHMARK — INDIVIDUAL ENTRY
Montréal
montreal.ca
SCORE
52/100
GRADE
F
STACK
Custom / non-WordPress
§ I — FINDINGS BY SEVERITY01 / 03
critical
0
high
0
medium
3
low
8
info
3
§ II — SUBJECT FILE02 / 03
- target.host
- montreal.ca
- server
- cloudflare
- tech
- Custom / non-WordPress
- tls
- HTTPS reachable
- hsts
- 1.0 years
- spf
- present
- dmarc
- p=quarantine
- domain.registered
- 2014-09-24 (11y)
- domain.registrar
- A.R.C. Informatique Inc.
- domain.expires
- 2026-09-24 (142d)
- civic-data
- CKAN @ donnees.montreal.ca
- civic-pages
- 1/7 categories present
- trackers
- 13 external origins (1 known, 12 unclassified)
§ III — TOP FINDINGS03 / 03
- medium
No Content-Security-Policy
- medium
SPF policy is permissive (~all)
- medium
No published privacy policy on standard paths
- low
No X-Content-Type-Options: nosniff
- low
No X-Frame-Options or CSP frame-ancestors
NEXT STEP