Executive summary
canva.com
Good shape, with a few gaps worth closing this quarter.
Full coverage: every applicable check was assessed.
2026-11-15 19:34 UTC
Useful for your IT provider or a colleague. Anyone with the link can view the report.
Track your progress
Fix the findings, then come back and rescan. Your scan history is saved in this browser so you can see exactly what improved.
Spoofing email from this domain is hard.
Traffic to the site is encrypted and the certificate is valid.
Some browser protections are missing.
The domain's infrastructure works, but recommended hardening is missing.
Help someone else check their domain
Share this public report with a colleague. They can review the evidence and check their own domain.
What to do first
- 1.
Limit what scripts your pages are allowed to run
This adds one layer of protection against injected scripts.
Who can fix it: Your website developer or web host
How to verify after the fix
curl -sIL https://canva.com/ | grep -i "Content-Security-Policy"
- 2.
Choose which companies may issue certificates for your domain
This reduces the chance of a certificate being issued by a provider you did not choose.
Who can fix it: Your domain registrar or DNS provider
How to verify after the fix
dig +short CAA canva.com
A starting point, not a security guarantee.
What this grade means
- Tested hostname
- canva.com
- Website request
- GET https://canva.com/ → https://www.canva.com/
- Scan time
- 2026-11-15 19:34:34 UTC
- Grading method
- Version 2How grading works
- Unverified or excluded checks
- None. Every applicable check was assessed.
This is a snapshot of the public configuration checks listed in this report. It does not verify the site's owner, business legitimacy, application security, or absence of vulnerabilities. It is not a security certification.
Get the badge
Show the live grade for canva.com in a README, docs or site footer. The badge links to the public report and refreshes every 24 hours.
Scan shown on this page: 2026-11-15 19:34:34 UTC. The badge may display a cached result for up to 24 hours. Open the linked report to check its scan time.
[](https://getmirror.online/report/canva.com)<a href="https://getmirror.online/report/canva.com"><img src="https://getmirror.online/badge/canva.com.svg" alt="Domain Armor grade"></a>https://getmirror.online/badge/canva.com.svgScan history
AI fix plan
Pick scans from this browser's history. The AI compares them, explains what changed and builds a prioritized, step-by-step plan.
Scans to analyze
0 of 6 selectedThe current scan is always included.
AI-generated from your scan results only. Review each step before applying it; nothing is sent to or changed on the domain.
Agent access & discovery signals
Optional and unscored — it never changes the grade. Reads up to three public files from this site (robots.txt, llms.txt and /.well-known/security.txt) and reuses the homepage headers already fetched. llms.txt is an emerging proposal, not an official standard. It is informational and does not affect the grade.
Technical detail
Click a check to see the public data, a verification command, a safe fix recommendation and documentation sources.
Email security
30/30Encryption & certificate
25/25Browser protections
22/30DNS infrastructure
10/15Public DNS records
| A | canva.com | 3.160.5.2 3.160.5.64 3.160.5.83 3.160.5.100 |
| AAAA | canva.com | 2600:9000:25f4:200:b:add6:7500:93a1 2600:9000:25f4:2600:b:add6:7500:93a1 2600:9000:25f4:4200:b:add6:7500:93a1 2600:9000:25f4:8000:b:add6:7500:93a1 2600:9000:25f4:8800:b:add6:7500:93a1 2600:9000:25f4:8a00:b:add6:7500:93a1 2600:9000:25f4:a000:b:add6:7500:93a1 2600:9000:25f4:a600:b:add6:7500:93a1 |
| MX | canva.com | 1 aspmx.l.google.com 5 alt1.aspmx.l.google.com 5 alt2.aspmx.l.google.com 10 alt3.aspmx.l.google.com 10 alt4.aspmx.l.google.com |
| NS | canva.com | ns-253.awsdns-31.com ns-730.awsdns-27.net ns-1421.awsdns-49.org ns-1851.awsdns-39.co.uk |
| TXT | canva.com | MS=ms92090372 cdc0ecd8-b767-4b2a-961d-056ff91c50cf apple-domain-verification=AAz7BIDOOK5bj9VF status-page-domain-verification=fgb6hyksgk8x docusign=4c293e32-cbde-4ddf-bec8-79108891d648 https://issues.sonatype.org/browse/OSSRH-53881 lucidlink-verification=Q8D0J05EK61V0PE82T654XJBMC 1password-site-verification=CEUWLSG27ZBI3NCDNFPDQXMJBY airtable-verification=a351d73cf64b3a7900588fe07af4eca6 airtable-verification=e13696d96fe5c6f38c47676debdd401e bugcrowd-verification=400b9a149f7cdd8664c2e7e502482536 elevenlabs=P6f8fr3lI9xEMWdES8L3qlVe_hOiMQs7DN9MRcIhYx4 openai-domain-verification=dv-X62J0FmW8lDn4eDouDTtdvnm detectify-verification=79cd57657f82d1fbb417ce3beec7cbe6 docker-verification=5298cfeb-b2af-4973-a4ae-72cfba77efa8 shopify-verification-code=VFL6jPSmWRU2VUyhiN8qIQTeSnfgpA mongodb-site-verification=stxOuL7yJeLEHCRwM4KlS0w3Qn5QDXkt mongodb-site-verification=wUQ4V3GaUzBwppXzin6kKc9AybLlHJ14 cursor-domain-verification-eb1g1h=nven1Rl68xcItm0SV3eqGeGaU facebook-domain-verification=05c971f78w3exkut5f717mw8obqmf3 twilio-domain-verification=f221ae68020aa3916d82bef6ca2fcbc0 pinterest-site-verification=b91a2bb89d0241853d81d959d5a78f07 onetrust-domain-verification=155ccaa6043f43439fb8fdbd4b1be792 onetrust-domain-verification=857af271813b4850b88f8e48bc2b2e78 have-i-been-pwned-verification=b633a4fdd0ff3575f1580524a28c9c7d monday-com-verification=LnZZjRw2c6n_jXge5OWXu9GWtGGjlxNtMteJuNqM0bQ yahoo-verification-key=fksNKRwkSoLGj4TIoVX0Iybviy7x0xpgDkRv/8s9Vw4= google-site-verification=0UOVvHC1k0nMb_2YKhFkMRkp4yRlqN-9Va_WB8b1qV0 google-site-verification=1uigN3ZKYSw5lr4ZdVugeteeJpy31qMbRecLJ_1ZVJU google-site-verification=2dvQv03NLacULRWLTE7UGnoYc0P18AKoAAg91FRtOTo google-site-verification=CVeAVsJ3_hxhfhDQTbtvIbpzUIIvUZ03vQCSCx7fCZk google-site-verification=DW2cTgo6bXtus9wdZWW_20IB3HhMUoH2dLyitWm5VZU google-site-verification=JqtkyfjBz-Uq1Xqk7REatNCxZnlo4gYFis8EdI_gVQ0 google-site-verification=MJYHtvI-o93g5yti0Uey9u-hglJQ6UnPfV0djrxlT9M google-site-verification=MfIUBrtfhRkfARKs7m47C8eRPrJet6cRCq8M18-bHLo google-site-verification=Nj3tLWEXpg6645jNi89eJ4d-f3EKhg0mywGniT6cnP0 google-site-verification=OORAEPphyRjSBXDWDBGtbZo0oElHFsUfxPQBesBvU6s google-site-verification=TwtsJNfrmc2RPw6q28QiKM-wnDaowIdVWWX7VhmTDvA google-site-verification=Y907KhOV3MD6WEXxbbTsYtSj1k5r3lDAVtM7bT8Tw58 google-site-verification=YGcdBuAhkMJMRa5khtl9hTKLAHlayiapf0pxJph2ZcU google-site-verification=ZZHXa27FmPeiiZ1sM6N3i3widAseyqpbpp5mfW18q5A google-site-verification=a9fY2y2BlMyyaiLXgGNEIwYe80ZXchnC3Fib7-7CN30 google-site-verification=bQC1cPBMACHUOt271BPTfL6k2qsoXlrHkNNTW0bVGKg google-site-verification=bn-oB_Sgkg-cPqCil91EY6tVtaRlq2x68HktpHFloeM google-site-verification=eAc0jqdGQQKV0P-Rce35fFYWbiRi-Ic4QZocWJC45OE google-site-verification=hZFAMgOOsawLXNZFTJ5XAsml2KJc5leHofbwIiLCl00 google-site-verification=vGYy48g7sb4flIluKql8BFp3_6lKKjbQEUGHUDSxCdA google-site-verification=xDNuQ7HHiwzDPok6K8T5BcxOhJ5fB0IL9vf2xLc0YAs tiktok-developers-site-verification=bTjMTogvil8AGPOJ6A2pysQYv811Q0ie browserstack-domain-verification=24f3b7bc-a461-4340-aa4b-dbf671f16381 zoom-domain-verification=ZOOM_verify_108a73b936394b4d83555479d9dab5f2 liveramp-site-verification=7cfkiVRS0afhs5IQ7o96bHcblYCH-SI_0G-eu7r9LsM mgverify=34d839e7ad9cdafaaccc77da386dcff2c46e4a628449d8e434cd13b032c82201 neat-pulse-domain-verification-KX9q8nX=db71101a-781f-4da4-86ad-2fe12ade2c34 hubspot-domain-verification=ZGM1Zjc3YzktNjdmZC00N2JlLThiOTQtY2ViZjI2NTA2OTQw hubspot-developer-verification=NDU5MWU5ODItY2E1Zi00YTY0LWEwNGEtNWU5M2EzOGIwZDll hubspot-developer-verification=ZWRmOWRlMjEtZGU1Zi00MTJiLWE4YjktNWQ3NmIyNDA5NDhm stripe-verification=15ef6563e51240246ef5c70232027055e35f306d5a68e239ba4d60b65b5e8f46 stripe-verification=5d4f5c71179a849cf68764a56809bfaada60fd51ca9a6c5b881b7477dbe92f70 stripe-verification=bbf18c986f16d71344fe2d0a77ef8b893ad8083e09a53e5fb59a864553c49921 stripe-verification=ec89fd8a56a7c9b8a0271fb890adecdfe20b8c157ade22d326b0ab9389b43f9b stripe-verification=f4e689eb94442db29e022a6d99d0d5225c45eb72488d9fdf1510b94fe6e85694 wiz-domain-verification=7fe44deeceff62c6c3011ccf4b4ddae2fd6e94b39ec8cb2cb7e3343dc624d9c3 ahrefs-site-verification_801b8774fd779b395b1c81e48f7900e305369a5ed19eb3201a3dbc918465f5de drift-domain-verification=9cea5d6a9cc67d7d8195abc4b7afefed111d50ad43225041c8d5f7fb7c2f6775 adobe-idp-site-verification=2be841675181663752bc242d59d2428df60b607824db83ed808c220becc78765 atlassian-domain-verification=rie8jGbQjxwFnUfEJ5DhYCdtEResa9Vg773/vaE2DtJwnEbS2txPvtfkuKhhLPTI parallels-domain-verification=f1c1fd03c9524b068006530a9bb9e5c99bb75ed2d50b4249aa50d897b66cc8d8 gauntlet-domain-verification=H9sUOdHq/SMDoMyBvXJiKkoNcY9g+3uSQ17NNxJ/kY37wSJe8i7D9x50SuXPMSV0T8mxcFjDlUX+EVhpt+99Gg== postman-domain-verification=de148d23ecf7857ca6894818bd6b04d811b8e7bebcd91e5060df8aee3824726c7cdc06b72d0197a2826fd99d08a687f4cd739c2af0b7894e81bffeaf880b818c v=spf1 include:_spf1.canva.com include:_spf2.canva.com include:_spf3.canva.com include:_spf4.canva.com include:_spf5.canva.com include:_spf6.canva.com include:_spf7.canva.com include:_spf8.canva.com include:_spf9.canva.com -all |
| TXT | _dmarc.canva.com | v=DMARC1; p=reject; rua=mailto:dmarc-reports@canva.com; ruf=mailto:dmarc-reports+forensics@canva.com; fo=1 |
| CAA | canva.com | — |
| DS | canva.com | 34951 13 2 a61f6abc2276e29688dd065d95a7397bc472e85969e6c6afcfdd191bd08893ec |