Automatic security check · Public OSINT only
Scanned URL
mongodb.com security check
Public OSINT valuation for mongodb.com: grade D (53/100). Title signal “MongoDB | The Intelligent Data Platform for the AI Era | MongoDB”. 0 security headers present, 8 commonly expected headers missing. This is a defensive surface review — not a penetration test.
53
/100
Grade D
- High concern
- Elevated risk
- Caution advised
- Trusted — verify
- Strong protections
How we scored mongodb.com
Positive signals
- TLS handshake OK (TLSv1.3).
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
- robots.txt is publicly available.
- RDAP domain record available (mongodb.com).
- Final HTTP status 200 at https://www.mongodb.com/.
Risk signals
- HSTS header missing on the final HTTPS response.
- Content-Security-Policy not observed.
- X-Content-Type-Options missing.
- X-Powered-By disclosed: Next.js.
Findings
- TLS handshake OK (TLSv1.3).
- HSTS header missing on the final HTTPS response.
- Content-Security-Policy not observed.
- X-Content-Type-Options missing.
- X-Powered-By disclosed: Next.js.
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
- robots.txt is publicly available.
- RDAP domain record available (mongodb.com).
- Final HTTP status 200 at https://www.mongodb.com/.
Technical details
DNS
resolved- A
- 15.197.135.80, 3.33.132.188
- AAAA
- —
- PTR
- af09550846fd84114.awsglobalaccelerator.com
- error
- —
TLS / certificate
ok- version
- TLSv1.3
- cipher
- TLS_AES_256_GCM_SHA384
- issuer
- Let's Encrypt
- notAfter
- Jan 3 05:16:50 2027 GMT
- SAN sample
- mongodb.com
- error
- —
HTTP & security headers
0 present- finalUrl
- https://www.mongodb.com/
- status
- 200
- server
- istio-envoy
- x-powered-by
- Next.js
- present
- —
- missing
- strict-transport-security, content-security-policy, x-content-type-options, x-frame-options, referrer-policy, permissions-policy, cross-origin-opener-policy, cross-origin-resource-policy
- cookie Secure
- False
- cookie HttpOnly
- False
Tech fingerprint (public)
passive- title
- MongoDB | The Intelligent Data Platform for the AI Era | MongoDB
- generator
- —
- tech
- Next.js
- script hosts
- x, assets.contentstack.io
- description
- MongoDB is the intelligent data platform for the AI era. Get your ideas to market faster with flexible, real-time data that scales across any cloud.
RDAP / registration
rdap- domain
- mongodb.com
- registrar
- MarkMonitor Inc.
- created
- 2008-07-08T23:48:57Z
- expires
- 2034-07-08T23:48:57Z
- nameservers
- ns-1047.awsdns-02.org, ns-1636.awsdns-12.co.uk, ns-276.awsdns-34.com, ns-868.awsdns-44.net, ns-cloud-e1.googledomains.com, ns-cloud-e2.googledomains.com, ns-cloud-e3.googledomains.com, ns-cloud-e4.googledomains.com
- status
- client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
- error
- —
Public well-known
passive- /.well-known/security.txt
- HTTP 200 · found
- /robots.txt
- HTTP 200 · found
- /security.txt
- HTTP 404