HTTP security · Mozilla Observatory
A+
115/100 · 12 of 12 checks passed.
View the scan ↗Evidence / 30 October 2026
Test the work.
Show the evidence.
Published checks on this website. Dated results, visible limitations.
Web standards · Internet.nl
100%
All five categories passed.
View the dated report ↗Transport security · Qualys SSL Labs
A+
All four tested endpoints.
View the assessment ↗Privacy in practice.
Webbkoll observed zero cookies and zero localStorage entries. Its homepage visit made three external requests to two Cloudflare analytics hosts. The follow-up check confirmed a good content policy and no referrer leakage. Cloudflare network-error reporting and the analytics script remain third-party dependencies.
Checks, with boundaries.
- TLS 1.3 required. Older clients limited to TLS 1.2 cannot connect.
- DNSSEC validated from the registrar DS record to Cloudflare’s signed DNS answers.
- 13 automated application tests pass: validation, privacy controls, retries, retention, crawler formats and private-report access.
- Desktop and mobile interfaces reviewed. No field Core Web Vitals or accessibility certification claimed.
These are point-in-time checks, not a penetration test, certification or guarantee. External tools assess different parts of the system; their scores are not interchangeable.