Domain Armor
Domain scores
C79/100

Executive summary

docusign.com

Moderate exposure. There are gaps an attacker could exploit — fix them soon.

Full coverage: every applicable check was assessed.

2026-11-15 19:34 UTC

Print report / PDF

Useful for your IT provider or a colleague. Anyone with the link can view the report.

Track your progress

Fix the findings, then come back and rescan. Your scan history is saved in this browser so you can see exactly what improved.

Email security30/30
Good

Spoofing email from this domain is hard.

Encryption & certificate25/25
Good

Traffic to the site is encrypted and the certificate is valid.

Browser protections14/30
Critical

Several browser hardening headers are missing, which removes layers of protection against script injection and framing.

DNS infrastructure10/15
Needs attention

The domain's infrastructure works, but recommended hardening is missing.

Help someone else check their domain

Share this public report with a colleague. They can review the evidence and check their own domain.

Get the report badge

What to do first

  1. 1.

    Stop other sites from embedding your pages

    This removes one way to trick visitors into clicking something on your site unknowingly.

    Who can fix it: Your website developer or web host

    How to verify after the fix

    curl -sIL https://docusign.com/ | grep -i "X-Frame-Options"
  2. 2.

    Limit what scripts your pages are allowed to run

    This adds one layer of protection against injected scripts.

    Who can fix it: Your website developer or web host

    How to verify after the fix

    curl -sIL https://docusign.com/ | grep -i "Content-Security-Policy-Report-Only"

A starting point, not a security guarantee.

What this grade means

Tested hostname
docusign.com
Website request
GET https://docusign.com/ → https://www.docusign.com/
Scan time
2026-11-15 19:34:33 UTC
Grading method
Version 2How grading works
Unverified or excluded checks
None. Every applicable check was assessed.

This is a snapshot of the public configuration checks listed in this report. It does not verify the site's owner, business legitimacy, application security, or absence of vulnerabilities. It is not a security certification.

Get the badge

Domain Armor grade

Show the live grade for docusign.com in a README, docs or site footer. The badge links to the public report and refreshes every 24 hours.

Scan shown on this page: ⁦2026-11-15 19:34:33 UTC⁩. The badge may display a cached result for up to 24 hours. Open the linked report to check its scan time.

Markdown
[![Domain Armor grade](https://getmirror.online/badge/docusign.com.svg)](https://getmirror.online/report/docusign.com)
HTML
<a href="https://getmirror.online/report/docusign.com"><img src="https://getmirror.online/badge/docusign.com.svg" alt="Domain Armor grade"></a>
Badge URL
https://getmirror.online/badge/docusign.com.svg

Scan history

AI fix plan

Pick scans from this browser's history. The AI compares them, explains what changed and builds a prioritized, step-by-step plan.

Scans to analyze

0 of 6 selected

The current scan is always included.

AI-generated from your scan results only. Review each step before applying it; nothing is sent to or changed on the domain.

Agent access & discovery signals

Optional and unscored — it never changes the grade. Reads up to three public files from this site (robots.txt, llms.txt and /.well-known/security.txt) and reuses the homepage headers already fetched. llms.txt is an emerging proposal, not an official standard. It is informational and does not affect the grade.

Technical detail

Click a check to see the public data, a verification command, a safe fix recommendation and documentation sources.

Email security

30/30

Encryption & certificate

25/25

Browser protections

14/30

DNS infrastructure

10/15

Public DNS records

Adocusign.com
3.33.186.135
15.197.167.90
AAAAdocusign.com—
MXdocusign.com
10 mxa-00567a01.gslb.pphosted.com
10 mxb-00567a01.gslb.pphosted.com
NSdocusign.com
a1-246.akam.net
a10-65.akam.net
a11-66.akam.net
a14-67.akam.net
a24-64.akam.net
TXTdocusign.com
MS=ms67859169
MS=ms75680623
1qrrz3xy28s3kb9mxsdwzmy2833rjr8d
3b9t4qnlb14b3j4f1zk8b6zkbhjl24sz
7cb4c0f6185b4c069917a859c6018188
_1n3zuex515pwaz9ux57pdo76zu6mw8p
_7je1xuhn68icu22h534578y7d1d9jpg
_g5xgrrxwbnpsohyhqy1gtb935rmb0q2
_ntm9vxjredwhj592dazupru4ypjuexq
_x2tjmfhsbtiixj6uei9the03696pl86
_x9lx42qvkft4lvx5xnbrpf4ffa11cye
nm7y5n5w3r41kh0mgm0hhfx0w22ml5pc
mandrill_verify.Vnq0HszA1CepkTznip_FYA
apple-domain-verification=L5oOwEIjTPfCi6qy
7kvhIewSmfzYT6xQKHexezvzAlieUeUZTnbhet91q10=
SFMC-uwMHeqLPPYzwqQhUlD0eB8l0YUdd__hku8JPxB5g
docusign=07cc1948-4667-458d-8221-2d01c6ec0423
docusign=9c3ea3d7-4aee-40a1-82df-ed91479a4356
jamf-site-verification=2t94XG2CN8VMI8lcBkkIjQ
canva-site-verification=lKl3pnMYLTq05XjpXd-aRg
bw=xnUy9wiC25MaMkPcRxA8xYZJztXH2PNy3k1fep88y4W5
traction-guest=94540d95-8b19-47a0-a6dc-cb43746fb4b6
bugcrowd-verification=a9aee6c6b285fc3c8a0a9429a51a56c6
docker-verification=8619c622-33ca-4c2e-823a-1ac5f9a40666
miro-verification=3bbe2265b6aac85cdf0d62480f55aa1f98d0f111
facebook-domain-verification=xmeljmwmkulb55922d6figl3y5byep
mixpanel-domain-verify=0b9a84b6-63de-429c-8019-4b63be01fb1b
snowflake-verification=62ea4659-01a0-1000-8010-0000000003eb
aws-securityagent-domain-verification=MYSYu1yv9PFsmRPgAKGk5A
onetrust-domain-verification=49280882734744dcabbfaadeb3461b2c
onetrust-domain-verification=6bc567834121445384b6077cb6e8afef
anthropic-domain-verification-kv28r4=ZfVCousFdYb80mnXy7VPHYL06
zoom-domain-verification = 6b92f302-c1a7-4e4f-8ec9-8eaf257af12b
slack-domain-verification=xKnCUoFDpdlXja9hJNPLKHX0FLCKe0sdykBNbVnA
google-site-verification=5q70TaAamSBg8f2gexe3fcEFgEqhyqclV0-4VgkbI7s
google-site-verification=AGfUvVkjL9meSSNuLA75PmgTGHLYmykqTT7Ce-g88rY
google-site-verification=BQe950Ny4H12LPrq3nX463djdqDtDcuZQF3k3-d6NxU
google-site-verification=CM-L3d16YNO0e15SsBdJGPDKx0_1crb8vTm5vkLmC6k
google-site-verification=FN0j932YtodsUHk8u5CSrN-WC3i4_VwZ-xa5ym7awdQ
google-site-verification=IWgC1RiG-IsEUfC5AFNQzXVUHJO2BR7-xVTipEIQlec
google-site-verification=ZzNmIdIl627l_6ar2mV4pSqhvFJtkYcfLZ962k1KRnY
google-site-verification=gpZenQNezQEr73t2yLMsnF_gry0YgJzgpkYq6W5DGIQ
apple-domain-verification=8u0Ek-_5Lp8mxGcRBVAKiKfGhvkXH3HEiEY4-LeBnls
apple-domain-verification=LAB8xhMNFmSTMJwu7SSTUsZpOu22-rpPp9B9Rrcnsoo
apple-domain-verification=_ZvKL6PpEZPpi48b9rUJSq6TrM_-RizDYjh_i4v6038
apple-domain-verification=fjunviKNr6WBcthwM7i9spdmv49RO24wosccHUsQk2g
h1-domain-verification=pHHzEmL9oApG4ggd2wLDoA6azwUfzKruNcd7v5iPB3jP5ujK
mgverify=38a3538020c90a4c88374e1efa5070d6391495967d03e54c10041cecf79972bd
hubspot-developer-verification=MDBhOGRhNWUtNTk2MS00MzE3LTg4ZDUtZGJhNDg1NDJhYTQz
hubspot-developer-verification=MDJiNTY5MjMtNWNhZi00ZDhmLTgxMzQtYzc5OTY0NTQ4ZmEz
hubspot-developer-verification=MGIxNzNjZGYtNmUyZS00MWMzLTg5OGMtMDQ3MTY4N2RmZDY1
hubspot-developer-verification=MGYzYjkxYWItMWNiMy00MTIyLWFlYzItZWEzZDVkNjdmMzM4
stripe-verification=27C29C0CFD9F712A57B1297FAB27767A9E5B4F602E742CF0895FBEA1DBD470F3
drift-domain-verification=3541dd3ad16ae6eddffcc507951754ada8b86ead750ec5c0b15c121d6d551714
adobe-idp-site-verification=86c7121fb82e768f19ab6e628c528aa9134334f2e9c7b86a0a3c68f1cf378902
cisco-ci-domain-verification=3d468b9e2cd00e2567c38675a66c3a06c78b818c6ce596796357e0630e672bab
atlassian-domain-verification=WXKa5/VcaS3xJ9EEfRIwU5FnU4Y1/qPXrimoN79BmpnAHMTBGDo6buWMhCegZVQb
atlassian-domain-verification=jtsHBHsm9NkNrMUyu8WV1v8OW5ktqP/CFZJJF6vAd0BTyGxz3/l5xcBIakVIvZGK
dell-technologies-domain-verification=docusign.com_31ef6946-1e18-4eaa-a1df-b5416c91e315_1758706056
v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ip4:205.220.176.129 ip4:205.220.164.129 ip4:205.220.166.129 ip4:205.220.177.61 include:_spf.google.com -all
TXT_dmarc.docusign.com
v=DMARC1; p=reject; sp=reject; adkim=r; aspf=r; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com; fo=1;
CAAdocusign.com—
DSdocusign.com
34436 8 2 50fae3e425bde1306e5c270700b32cb2c146cac9fb635567b81ac7fbe575c3e1