Scanned:
Score by axis
Watch this site's security
We'll email you if its security slips — a new vulnerability, an expiring certificate, a blacklisting. No account needed.
Security alerts only — nothing else, and no email unless something is wrong. Unsubscribe anytime.
Want more than security alerts?
Coming soonMonitor — daily re-scans across all five axes, instant alerts on new and cert expiry, Telegram & web push, and full history.
Add exactly one <h1> describing the page.
Add alt text to the remaining images.
Recommendations are ranked by their impact on your score.
HTTPS & HTTP→HTTPS redirect
HTTPS available; HTTP redirects to HTTPS
TLS certificate validity
Valid; expires in 37 days
expires 2026-08-20 · E7HSTS (Strict-Transport-Security)
Present
max-age=300;includeSubdomainsContent-Security-Policy
Present
default-src 'self' *.techcrunch.com; frame-ancestors 'self'; frame-src 'self' ht…Core security headers
All present
Mixed content (HTTP on HTTPS)
No insecure (http://) subresources
SPF email anti-spoofing
record present
v=spf1 a mx include:usb._netblocks.mimecast.com include:spf.protection.outlook.com include:aspmx.sailthru.com include:mail.zendesk.com include:242234635.spf02.hubspotemail.net -allDMARC email anti-spoofing
record present
v=DMARC1; p=reject; rua=mailto:6cc97f5d2993594@rep.dmarcanalyzer.com; ruf=mailto:6cc97f5d2993594@for.dmarcanalyzer.com; fo=1;Vulnerable front-end libraries
No recognizable front-end library versions detected
CMS known vulnerabilities
WordPress 6.9.4 — no known vulnerabilities match this version
Time to First Byte
2 ms
Text compression
Enabled (br)
HTTP/2 or HTTP/3
HTTP/2.0
Cache-Control
max-age=300, must-revalidate
Core Web Vitals (PageSpeed)
perf 64/100, 1571ms, 0.04 (field)
Page title
TechCrunch | Startup and Technology News
Meta description
107 characters
TechCrunch | Reporting on the business of technology, startups, venture capital funding, and Silicon ValleySingle H1
0 H1 tag(s)
Add exactly one <h1> describing the page.
Image alt text
41/70 images have alt (59%)
Add alt text to the remaining images.
Structured data (JSON-LD)
present
CollectionPage, BreadcrumbList, ListItem, WebSite, SearchAction, EntryPointCMS detection
WordPress 6.9.4
Web server
nginx
CDN detection
No CDN fingerprint detected
TLS version
TLS 1.3
IPv6 (AAAA record)
AAAA record present
2a04:fa87:fffd::c000:42dcGoogle Safe Browsing
Not flagged
Domain blacklist status
Not on major blocklists
checked: Spamhaus DBL, SURBLDomain age
Registered 2005-06-10 (~256 months)
Domain expiry
Expires in 332 days
2027-06-10Go deeper
The free scan reads what your site shows everyone. A Deep Audit does what an attacker does — it actively probes your verified site for what's really exposed.
These need active probing of your site: exposed .git/.env/backups, open admin panels, open ports, forgotten subdomains. Verify your domain and we'll show you what an attacker would find.
The deep scan is live and free while we're in beta. Verify your domain and run it now.
Active checks run only on a domain you've verified as yours, with your consent. We detect — never exploit. Free in beta; $39 one-time after launch, no subscription — and early adopters keep the deep scan free.
Run a free deep scanEmbed this badge on your website — it links back to this full report.
<a href="https://chkweb.com/report/techcrunch.com"><img src="https://chkweb.com/badge/techcrunch.com.svg" alt="Website security checked by CheckWeb" /></a>