Evidence behind every check.
Passive checks, timestamped results, and actionable next steps.
You’re exploring a demo workspace. Sample evidence is illustrative.orbit.so
Illustrative example scan
0 of 12 checks passed
Required: HTTPS, TLS validity, and HTTPS redirect.
Weekly monitoring
Manual scans are available every 10 minutes.
Evidence, always included
Expand any check to see its timestamp and raw results.
Automated checks
Presence checks confirm that a page was found; they do not establish legal compliance.
HTTPS reachableRequiredVerify ownership and run a scan to gather evidence.Not checked
Illustrative evidence · No scan yet
{}Next step: Verify domain ownership, enable a trusted TLS certificate with at least 14 days remaining, and redirect HTTP to HTTPS.
Valid TLS certificateRequiredVerify ownership and run a scan to gather evidence.Not checked
Illustrative evidence · No scan yet
{}Next step: Verify domain ownership, enable a trusted TLS certificate with at least 14 days remaining, and redirect HTTP to HTTPS.
HTTP → HTTPS redirectRequiredVerify ownership and run a scan to gather evidence.Not checked
Illustrative evidence · No scan yet
{}Next step: Verify domain ownership, enable a trusted TLS certificate with at least 14 days remaining, and redirect HTTP to HTTPS.
Strict Transport SecurityVerify ownership and run a scan to gather evidence.Not checked
Illustrative evidence · No scan yet
{}Next step: Set the Strict-Transport-Security header with a max-age of at least 15552000 seconds.
Content Security PolicyVerify ownership and run a scan to gather evidence.Not checked
Illustrative evidence · No scan yet
{}Next step: Define default-src, script-src, and frame-ancestors in a Content-Security-Policy header; avoid unsafe directives.
Browser security headersVerify ownership and run a scan to gather evidence.Not checked
Illustrative evidence · No scan yet
{}Next step: Set X-Content-Type-Options: nosniff, a Referrer-Policy, and CSP frame-ancestors or X-Frame-Options.
Privacy policyVerify ownership and run a scan to gather evidence.Not checked
Illustrative evidence · No scan yet
{}Next step: Link a readable privacy policy from the homepage.
Terms of serviceVerify ownership and run a scan to gather evidence.Not checked
Illustrative evidence · No scan yet
{}Next step: Link readable terms of service from the homepage.
Cookie consent signalsVerify ownership and run a scan to gather evidence.Not checked
Illustrative evidence · No scan yet
{}Next step: Review consent requirements for your site. Heuristic detection may miss custom banners.
Security contact fileVerify ownership and run a scan to gather evidence.Not checked
Illustrative evidence · No scan yet
{}Next step: Publish /.well-known/security.txt with a Contact URL or mailto address and a future Expires timestamp.
AI-readable site guideVerify ownership and run a scan to gather evidence.Not checked
Illustrative evidence · No scan yet
{}Next step: Publish /llms.txt with an H1 and links to your website’s key pages.
AI disclosure pageVerify ownership and run a scan to gather evidence.Not checked
Illustrative evidence · No scan yet
{}Next step: Provide a same-host AI disclosure URL in your disclosure form.