C78/100

Executive summary

revolut.com

Moderate exposure. There are gaps an attacker could exploit — fix them soon.

Full coverage: every applicable check was assessed.

2026-11-15 19:34 UTC

Print report / PDF

Useful for your IT provider or a colleague. Anyone with the link can view the report.

Track your progress

Fix the findings, then come back and rescan. Your scan history is saved in this browser so you can see exactly what improved.

Help someone else check their domain

Share this public report with a colleague. They can review the evidence and check their own domain.

What to do first

  1. 1.

    Limit what scripts your pages are allowed to run

    This adds one layer of protection against injected scripts.

    Who can fix it: Your website developer or web host

    How to verify after the fix

    curl -sIL https://revolut.com/ | grep -i "Content-Security-Policy"
  2. 2.

    Turn on DNS signing for your domain

    Signing helps resolvers detect forged answers about your domain.

    Who can fix it: Your domain registrar or DNS provider

    How to verify after the fix

    dig +short DS revolut.com

A starting point, not a security guarantee.

What this grade means

Tested hostname
revolut.com
Website request
GET https://revolut.com/ → https://www.revolut.com/
Scan time
2026-11-15 19:34:37 UTC
Grading method
Version 2How grading works
Unverified or excluded checks
None. Every applicable check was assessed.

This is a snapshot of the public configuration checks listed in this report. It does not verify the site's owner, business legitimacy, application security, or absence of vulnerabilities. It is not a security certification.

Get the badge

Domain Armor grade

Show the live grade for revolut.com in a README, docs or site footer. The badge links to the public report and refreshes every 24 hours.

Scan shown on this page: ⁦2026-11-15 19:34:37 UTC⁩. The badge may display a cached result for up to 24 hours. Open the linked report to check its scan time.

Markdown
[![Domain Armor grade](https://getmirror.online/badge/revolut.com.svg)](https://getmirror.online/report/revolut.com)
HTML
<a href="https://getmirror.online/report/revolut.com"><img src="https://getmirror.online/badge/revolut.com.svg" alt="Domain Armor grade"></a>
Badge URL
https://getmirror.online/badge/revolut.com.svg

Scan history

AI fix plan

Pick scans from this browser's history. The AI compares them, explains what changed and builds a prioritized, step-by-step plan.

Scans to analyze

0 of 6 selected

The current scan is always included.

AI-generated from your scan results only. Review each step before applying it; nothing is sent to or changed on the domain.

Agent access & discovery signals

Optional and unscored — it never changes the grade. Reads up to three public files from this site (robots.txt, llms.txt and /.well-known/security.txt) and reuses the homepage headers already fetched. llms.txt is an emerging proposal, not an official standard. It is informational and does not affect the grade.

Technical detail

Click a check to see the public data, a verification command, a safe fix recommendation and documentation sources.

Email security

27/30

Encryption & certificate

25/25

Browser protections

18/30

DNS infrastructure

8/15

Public DNS records

Arevolut.com
162.159.140.233
172.66.0.231
AAAArevolut.com—
MXrevolut.com
5 alt2.aspmx.l.google.com
10 alt3.aspmx.l.google.com
1 aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
NSrevolut.com
ns-cloud-d1.googledomains.com
ns-cloud-d2.googledomains.com
ns-cloud-d4.googledomains.com
ns-cloud-d3.googledomains.com
TXTrevolut.com
google-site-verification=J50mEx511qzmeTPOsUU3aZKLmzw6fKn1loRDuzfppUM
VISA=97A654000FAB3C062CAC3619E9F9C0E6
436a12cf57e2df2e19e3bd4cccd5229d6950ac80bd6fa3781de3ef3d2a9fbf9a
cursor-domain-verification-sy3hkv=1ZyJzWDtlr5B2kUt7nzYB62MB
atlassian-sending-domain-verification=4952210b-0a37-4050-9a55-ce2c58fa8b28
google-site-verification=CU5aHHDFaIS7rmPsqSE0Pwt2WXNyZt0YBnoiG3A3Rqc
mtc=YmEyYzAwNWUtZmE2ZS00NGUxLThjODYtMDRlZGRlMWUwN2Iy
google-site-verification=QpnQ6Qe8tL0izHlvEBNMZ1CJPagyXcRrx5_3QRoqhEc
00D8d000001xy3T=1TBTu000000003F
google-site-verification=FvyMDL1jIHpmqVM_Row8cOojeQB3-kIRT2oXNalAYxY
pardot969163=bcff4cc1d8a139eeb479882477f5ce35bf6c3ad61dd5a03b9c44aeaf26358da4
Foxit-domain-verification=f54a9f4d26a25ebdbd5447ac0013d0de
678189f51b3ce2a5d67c166a8ac777440e0c993a23b84d301f725bb84997b148
60a5b08a2f480aef4991e6ff691b557fa15ebdec803229cdc855df6bcc995f69
_sq9cnlva91hma9r9attizpaqeis9ovp
364227379ef2a02c552e43077718593604053c2fbeee4b0a12c370b8cf4ce088
wiz-domain-verification=5855698809e48702af531b9d8049dbab0e250153fdebc3d712611253db1cf329
VISA=E08F11962574D50E1C9C150D6CD09EB8
f1d42c8c84f7179e61cd0d3fdb5da375bd081e44090c7769936e9f0aca343cf9
anthropic-domain-verification-5fpm85=h9V4qLU6UpKu0vTH3VjnBZ6u3
v=spf1 include:_spf.google.com include:mail.zendesk.com include:_spf.atlassian.net include:_spf.salesforce.com include:_spf.sparkpostmail.com ~all
862281804
apple-domain-verification=9QFO4rtc1CwwuJZW
h1-domain-verification=jwDB6VRcNMMMKRdsNpP2nDe3fTwSEa7H84eZm2ai62vx13Bu
google-site-verification=xX_fEjrjlZ3HH1z3z0hRZMt7ddvhhqt5lMzm_z46Qrg
too3o9112f5ioqpu133a5kgl6i
35039d909ec30a13dbc9f3894c6ca239f29844c1322b7e64d695273872dd49b6
atlassian-domain-verification=Mzbg6ekGcURWMWeIFPczmNvMDO5QI6FVn3RlnpBVNX+H8EpKVkcJjvwLGVkqUxAa
Certeurope=Fgiq7Pvj9CzR824G74JZHrr2MeF3w8
_58tw41qgnggbur4s48p0gmeds1w2n4r
adobe-idp-site-verification=8b010750c67cbf46c5be78c2e71a28f0211964e09395094a3da0b494dbc651f3
_szxjgexeof7rmpa3i038fmje0djgyjt
mtc=NDljMjNkNmYtNTVkZS00MjI2LTg2M2UtYzdhZDcyZGY2NjRj
docusign=e89be285-c58c-436a-9483-c0bfa2ca9b16
google-site-verification=OXSc6c_1hvbBupLkGnAojCeg21KLxS9_0hJm4Fl5KQs
VDJzVD16Woc2iWGs1fFQ2QOf+0ts75OHbERHEVFG7oU=
openai-domain-verification=dv-zeXdbzLrKAKVTQrTEUoPzdap
google-site-verification=w-FzBu1VDsU0MXdPY53ZXz-KYtXb-gmzZTr-QCzIKVc
jamf-site-verification=k8h7_eApcP1vEEE3x5TlkA
5a3687060ef94980f6da0f909097b8d8f2e8b8ac5718e0fbd17bb0596ef3121f
067ad03f127e069f7f7aa2360cf866845c0f3f35a71d667e7d1c8dc1cd6f384d
drift-domain-verification=2b5de3adf04e3120a8c9605ed8fbe18280867c93162d8b8a810414a0ed94afb4
08bc6f84b232f61558b5c23cfc326216c3e752e58407265048ba5a98d7057001
atlassian-domain-verification=3f09F8xwF6p3RmwdwQJHxQdjb8gaKNMWriwUv1Q084JbPSvRNV+HM63xtoL72ENj
verification_token=6nJlA4vmsz9FGxML8s5RKThu1
docusign=9aa886dc-315c-406b-a75c-a6bf6db6e8bc
jetbrains-domain-verification=dsa98mjgew5wx4h64rum7zitj
amazonses:q7YOwQ1cLMnGLTRksFWhJMsh+i8Ajg08QbY8aSgnrG0=
VISA=C2C643F71D0B04C4589EE3BBEE8620F6
MS=ms73364798
serval-domain-verification-9c6c02=cEIzrHyeHnAVd7xUk26tCkXfP
ORUvC5FWkczlsgpQD41EiQ
125520735
zapier-domain-verification-challenge=ba39b827-8ec9-4497-b017-72aa7de4f46c
TXT_dmarc.revolut.com
v=DMARC1; p=quarantine; pct=100; sp=quarantine; rua=mailto:revolut@rua.netcraft.com,mailto:dmarc@revolut.com; ruf=mailto:revolut@ruf.netcraft.com,mailto:dmarc@revolut.com;
CAArevolut.com
0 issue "e-szigno.hu"
0 issuewild "digicert.com"
0 issue "fnmt.es"
0 issue "letsencrypt.org"
0 issue "digicert.com"
0 issue "pki.goog"
0 issue "amazon.com"
0 issue "mastercard.com"
0 issuewild "fnmt.es"
0 iodef "mailto:security@revolut.com"
0 issue "buypass.com"
0 issue "ssl.com"
0 issue "sectigo.com"
0 issue "visa.com"
DSrevolut.com—