hogum
saudiaramco.com

saudiaramco.com security report

Certificate, security headers, email authentication, DNS, registration, and exposed hosts — from public sources.

35risk

Moderate

Some surface to tighten, nothing urgent.

0Critical
1High
1Medium
1Low
0Info
Collected 5.9sfrom cache
  1. Certificate Transparency
  2. DNS resolution2
  3. Network ownership0
  4. CDN / WAF detection0
  5. Exposed ports & CVEs2
  6. Registration
  7. DNS posture6
  8. Email authentication1
  9. Certificate
  10. Security headers3
  11. Archived URLs
  12. Analysis3
  • noteCertificate Transparency did not complete (HTTP 502). Results below are partial.
  • noteCertificate inspection is unavailable in this runtime.
  • noteNetwork ownership lookup is unavailable in this runtime; ASN and org are omitted.
  • noteCDN/WAF detection is unavailable in this runtime.
final https://www.aramco.com/status 200time 1017msstack cloudflare
  • ✓http:// redirects to https://
  • ✓Strict-Transport-Security
    max-age=31536000 ; includeSubDomains
  • ✗Content-Security-Policy
  • ✓Clickjacking protection
    SAMEORIGIN
  • ✓X-Content-Type-Options
    nosniff
  • ✗Referrer-Policy
  • –Permissions-Policyoptional
  • –security.txt publishedoptional — tells researchers where to report bugs
  • ✓Cookie ASP.NET_SessionId
    Secure · HttpOnly · SameSite=none
  • ✓Cookie SC_ANALYTICS_GLOBAL_COOKIE
    Secure · HttpOnly · SameSite=none
  • –No MX records — domain does not receive mail
  • ✓SPFends in -all
    v=spf1 mx ip4:198.36.37.17 ip4:198.36.37.16 ip4:198.36.37.18 ip4:198.36.37.19 -all
  • ✗DMARC
    no record
  • –MTA-STSn/a
AddressPortsCVEsEdgeNetwork
96.17.96.23
saudiaramco.com +1
80
0direct
—
96.17.96.25
saudiaramco.com +1
80
0direct
—
Archived URLs

Endpoints the Wayback Machine has kept — config files, backups, scripts. Slow to fetch, so it is here on request.