Security report for cityofithaca.org
Free passive scan · WAF/CDN, security headers, TLS, server exposure
F
cityofithaca.org
Security score 51/100 · No shield detected · 3 missing security headers
What we found
No WAF or CDN detectedHigh
The origin appears directly exposed — no edge firewall filtering OWASP Top 10 attacks, bad bots, or malicious IPs.
Missing HSTSMedium
The HSTS response header is not set.
Missing Referrer-PolicyLow
The Referrer-Policy response header is not set.
Missing Permissions-PolicyLow
The Permissions-Policy response header is not set.
cityofithaca.org has no WAF/CDN in front of it and 3 missing security headers — a managed shield can close those (headers via a response-headers policy, not WAF rules).
Protect cityofithaca.org — $150/mo, fully managedWant your own report? Scan your site free →