Executive summary
github.com
Good shape, with a few gaps worth closing this quarter.
Full coverage: every applicable check was assessed.
2026-11-15 19:22 UTC
Useful for your IT provider or a colleague. Anyone with the link can view the report.
Track your progress
Fix the findings, then come back and rescan. Your scan history is saved in this browser so you can see exactly what improved.
Spoofing email from this domain is hard.
Traffic to the site is encrypted and the certificate is valid.
The site instructs browsers to block common attacks.
The domain's infrastructure works, but recommended hardening is missing.
Help someone else check their domain
Share this public report with a colleague. They can review the evidence and check their own domain.
What to do first
- 1.
Turn on DNS signing for your domain
Signing helps resolvers detect forged answers about your domain.
Who can fix it: Your domain registrar or DNS provider
How to verify after the fix
dig +short DS github.com
- 2.
Turn off browser features your site does not use
This limits access to things like camera or location if a page is misused.
Who can fix it: Your website developer or web host
How to verify after the fix
curl -sIL https://github.com/ | grep -i "Permissions-Policy"
A starting point, not a security guarantee.
What this grade means
- Tested hostname
- github.com
- Website request
- GET https://github.com/
- Scan time
- 2026-11-15 19:22:32 UTC
- Grading method
- Version 2How grading works
- Unverified or excluded checks
- None. Every applicable check was assessed.
This is a snapshot of the public configuration checks listed in this report. It does not verify the site's owner, business legitimacy, application security, or absence of vulnerabilities. It is not a security certification.
Get the badge
Show the live grade for github.com in a README, docs or site footer. The badge links to the public report and refreshes every 24 hours.
Scan shown on this page: 2026-11-15 19:22:32 UTC. The badge may display a cached result for up to 24 hours. Open the linked report to check its scan time.
[](https://getmirror.online/report/github.com)<a href="https://getmirror.online/report/github.com"><img src="https://getmirror.online/badge/github.com.svg" alt="Domain Armor grade"></a>https://getmirror.online/badge/github.com.svgScan history
AI fix plan
Pick scans from this browser's history. The AI compares them, explains what changed and builds a prioritized, step-by-step plan.
Scans to analyze
0 of 6 selectedThe current scan is always included.
AI-generated from your scan results only. Review each step before applying it; nothing is sent to or changed on the domain.
Agent access & discovery signals
Optional and unscored — it never changes the grade. Reads up to three public files from this site (robots.txt, llms.txt and /.well-known/security.txt) and reuses the homepage headers already fetched. llms.txt is an emerging proposal, not an official standard. It is informational and does not affect the grade.
Technical detail
Click a check to see the public data, a verification command, a safe fix recommendation and documentation sources.
Email security
27/30Encryption & certificate
25/25Browser protections
28/30DNS infrastructure
8/15Public DNS records
| A | github.com | 140.82.112.3 |
| AAAA | github.com | — |
| MX | github.com | 0 github-com.mail.protection.outlook.com |
| NS | github.com | dns1.p08.nsone.net dns2.p08.nsone.net dns3.p08.nsone.net dns4.p08.nsone.net ns-1283.awsdns-32.org ns-1707.awsdns-21.co.uk ns-421.awsdns-52.com ns-520.awsdns-01.net |
| TXT | github.com | 00Dd0000000hHE0=1TBKg000000TN2r MS=6BF03E6AF5CB689E315FB6199603BABF2C88D805 MS=ms44452932 MS=ms58704441 TAILSCALE-xOzoDvFUzZr5YYVCQFuD adobe-idp-site-verification=b92c9e999aef825edc36e0a3d847d2dbad5b2fc0e05c79ddd7a16139b48ecf4b anthropic-domain-verification-4az7qn=if8YWuRRqwLycGJDooumzHtxm apple-domain-verification=RyQhdzTl6Z6x8ZP4 atlassian-domain-verification=jjgw98AKv2aeoYFxiL/VFaoyPkn3undEssTRuMg6C/3Fp/iqhkV4HVV7WjYlVeF8 calendly-site-verification=at0DQARi7IZvJtXQAWhMqpmIzpvoBNF7aam5VKKxP cursor-domain-verification-gtfwmt=1rfLOtiTngX5QSxD5HvNKTvm3 docusign=087098e3-3d46-47b7-9b4e-8a23028154cd facebook-domain-verification=39xu4jzl7roi7x0n93ldkxjiaarx50 google-site-verification=82Le34Flgtd15ojYhHlGF_6g72muSjamlMVThBOJpks google-site-verification=UTM-3akMgubp6tQtgEuAkYNYLyYAvpTnnSrDMWoDR3o jamf-site-verification=XtaPNIYghF_e_xRDI8CjgQ krisp-domain-verification=ZlyiK7XLhnaoUQb2hpak1PLY7dFkl1WE loom-site-verification=f3787154f1154b7880e720a511ea664d miro-verification=d2e174fdb00c71e0bcf58f8e58c3da2dd80dcfa9 openai-domain-verification=dv-3nh33eQwdkotMIAzLrIDVZo1 serval-domain-verification-ydryhj=qbkiEakpwEpTvHh5fIiCqtaue shopify-verification-code=t1YPwcmvnxZyBycaCpk1MPyWoFs72o stripe-verification=f88ef17321660a01bab1660454192e014defa29ba7b8de9633c69d6b4912217f v=spf1 ip4:192.30.252.0/22 include:spf.protection.outlook.com include:_netblocks.google.com include:_netblocks2.google.com include:mail.zendesk.com include:_spf.salesforce.com include:servers.mcsv.net include:mktomail.com include:sendgrid.net ip4:62.253.227.114 ip4:166.78.69.169 ip4:166.78.69.170 ip4:166.78.71.131 ~all |
| TXT | _dmarc.github.com | v=DMARC1; p=quarantine; sp=reject; pct=100; rua=mailto:dmarc@github.com; ruf=mailto:dmarc@github.com; fo=1 |
| CAA | github.com | 0 issue "digicert.com" 0 issue "globalsign.com" 0 issue "letsencrypt.org" 0 issue "sectigo.com" 0 issuewild "digicert.com" 0 issuewild "letsencrypt.org" 0 issuewild "sectigo.com" |
| DS | github.com | — |