Automatic security check · Public OSINT only
Scanned URL
postgresql.org security check
Public OSINT valuation for postgresql.org: grade B (75/100). Title signal “PostgreSQL: The world's most advanced open source database”. 4 security headers present, 4 commonly expected headers missing. This is a defensive surface review — not a penetration test.
75
/100
Grade B
- High concern
- Elevated risk
- Caution advised
- Trusted — verify
- Strong protections
How we scored postgresql.org
Positive signals
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Content-Security-Policy observed.
- DNS resolves publicly (A/AAAA).
- robots.txt is publicly available.
- RDAP domain record available (postgresql.org).
Risk signals
- X-Content-Type-Options missing.
Findings
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Content-Security-Policy observed.
- X-Content-Type-Options missing.
- DNS resolves publicly (A/AAAA).
- robots.txt is publicly available.
- RDAP domain record available (postgresql.org).
- Final HTTP status 200 at https://www.postgresql.org/.
Technical details
DNS
resolved- A
- 217.196.149.50
- AAAA
- 2a02:16a8:dc51::50
- PTR
- zalkon.postgresql.org
- error
- —
TLS / certificate
ok- version
- TLSv1.3
- cipher
- TLS_AES_256_GCM_SHA384
- issuer
- Let's Encrypt
- notAfter
- Dec 30 01:09:08 2026 GMT
- SAN sample
- archives.postgresql.org, postgresql.org, stackbuilder.postgresql.org, www.postgresql.org, zalkon.postgresql.org
- error
- —
HTTP & security headers
4 present- finalUrl
- https://www.postgresql.org/
- status
- 200
- server
- nginx
- x-powered-by
- —
- present
- content-security-policy, cross-origin-opener-policy, strict-transport-security, x-frame-options
- missing
- x-content-type-options, referrer-policy, permissions-policy, cross-origin-resource-policy
- cookie Secure
- False
- cookie HttpOnly
- False
Tech fingerprint (public)
passive- title
- PostgreSQL: The world's most advanced open source database
- generator
- —
- tech
- —
- script hosts
- x
- description
- The official site for PostgreSQL, the world
RDAP / registration
rdap- domain
- postgresql.org
- registrar
- Gandi SAS
- created
- 1996-10-22T04:00:00.816Z
- expires
- 2029-10-21T04:00:00Z
- nameservers
- ns1.postgresql.org, ns2.postgresql.org, ns3.postgresql.org, ns4.postgresql.org
- status
- client transfer prohibited
- error
- —
Public well-known
passive- /.well-known/security.txt
- HTTP 404
- /robots.txt
- HTTP 200 · found
- /security.txt
- HTTP 404