Automated public DNS and web checks; results may be incomplete. These are passive observations, not an assessment of the organization.

C79/100

Executive summary

docusign.com

Moderate exposure. There are gaps an attacker could exploit — fix them soon.

Full coverage: every applicable check was assessed.

2026-11-15 18:19 UTC

Print report / PDF

Useful for your IT provider or a colleague. Anyone with the link can view the report.

Track your progress

Fix the findings, then come back and rescan. Your scan history is saved in this browser so you can see exactly what improved.

Email security30/30

Good

Spoofing email from this domain is hard.

Encryption & certificate25/25

Good

Traffic to the site is encrypted and the certificate is valid.

Browser protections14/30

Critical

Several browser hardening headers are missing, which removes layers of protection against script injection and framing.

DNS infrastructure10/15

Needs attention

The domain's infrastructure works, but recommended hardening is missing.

Help someone else check their domain

Share this public report with a colleague. They can review the evidence and check their own domain.

Get the report badge

What to do first

1.
Stop other sites from embedding your pages
This removes one way to trick visitors into clicking something on your site unknowingly.
Who can fix it: Your website developer or web host
How to verify after the fix
```
curl -sIL https://docusign.com/ | grep -i "X-Frame-Options"
```
2.
Limit what scripts your pages are allowed to run
This adds one layer of protection against injected scripts.
Who can fix it: Your website developer or web host
How to verify after the fix
```
curl -sIL https://docusign.com/ | grep -i "Content-Security-Policy-Report-Only"
```

A starting point, not a security guarantee.

What this grade means

Tested hostname: docusign.com
Website request: GET https://docusign.com/ → https://www.docusign.com/
Scan time: 2026-11-15 18:19:47 UTC
Grading method: Version 2How grading works
Unverified or excluded checks: None. Every applicable check was assessed.

This is a snapshot of the public configuration checks listed in this report. It does not verify the site's owner, business legitimacy, application security, or absence of vulnerabilities. It is not a security certification.

Get the badge

Show the live grade for docusign.com in a README, docs or site footer. The badge links to the public report and refreshes every 24 hours.

Scan shown on this page: ⁦2026-11-15 18:19:47 UTC⁩. The badge may display a cached result for up to 24 hours. Open the linked report to check its scan time.

Markdown

[![Domain Armor grade](https://getmirror.online/badge/docusign.com.svg)](https://getmirror.online/report/docusign.com)

HTML

<a href="https://getmirror.online/report/docusign.com"><img src="https://getmirror.online/badge/docusign.com.svg" alt="Domain Armor grade"></a>

Badge URL

https://getmirror.online/badge/docusign.com.svg

Scan history

AI fix plan

Pick scans from this browser's history. The AI compares them, explains what changed and builds a prioritized, step-by-step plan.

Scans to analyze

0 of 6 selected

C79/10011/15/26, 06:19 PMCurrent

The current scan is always included.

AI-generated from your scan results only. Review each step before applying it; nothing is sent to or changed on the domain.

Technical detail

Click a check to see the public data, a verification command, a safe fix recommendation and documentation sources.

Email security

30/30

Encryption & certificate

25/25

Browser protections

14/30

DNS infrastructure

10/15

Public DNS records

A	docusign.com	3.33.186.135 15.197.167.90
AAAA	docusign.com	—
MX	docusign.com	10 mxa-00567a01.gslb.pphosted.com 10 mxb-00567a01.gslb.pphosted.com
NS	docusign.com	a1-246.akam.net a10-65.akam.net a11-66.akam.net a14-67.akam.net a24-64.akam.net
TXT	docusign.com	MS=ms67859169 MS=ms75680623 1qrrz3xy28s3kb9mxsdwzmy2833rjr8d 3b9t4qnlb14b3j4f1zk8b6zkbhjl24sz 7cb4c0f6185b4c069917a859c6018188 _1n3zuex515pwaz9ux57pdo76zu6mw8p _7je1xuhn68icu22h534578y7d1d9jpg _g5xgrrxwbnpsohyhqy1gtb935rmb0q2 _ntm9vxjredwhj592dazupru4ypjuexq _x2tjmfhsbtiixj6uei9the03696pl86 _x9lx42qvkft4lvx5xnbrpf4ffa11cye nm7y5n5w3r41kh0mgm0hhfx0w22ml5pc mandrill_verify.Vnq0HszA1CepkTznip_FYA apple-domain-verification=L5oOwEIjTPfCi6qy 7kvhIewSmfzYT6xQKHexezvzAlieUeUZTnbhet91q10= SFMC-uwMHeqLPPYzwqQhUlD0eB8l0YUdd__hku8JPxB5g docusign=07cc1948-4667-458d-8221-2d01c6ec0423 docusign=9c3ea3d7-4aee-40a1-82df-ed91479a4356 jamf-site-verification=2t94XG2CN8VMI8lcBkkIjQ canva-site-verification=lKl3pnMYLTq05XjpXd-aRg bw=xnUy9wiC25MaMkPcRxA8xYZJztXH2PNy3k1fep88y4W5 traction-guest=94540d95-8b19-47a0-a6dc-cb43746fb4b6 bugcrowd-verification=a9aee6c6b285fc3c8a0a9429a51a56c6 docker-verification=8619c622-33ca-4c2e-823a-1ac5f9a40666 miro-verification=3bbe2265b6aac85cdf0d62480f55aa1f98d0f111 facebook-domain-verification=xmeljmwmkulb55922d6figl3y5byep mixpanel-domain-verify=0b9a84b6-63de-429c-8019-4b63be01fb1b snowflake-verification=62ea4659-01a0-1000-8010-0000000003eb aws-securityagent-domain-verification=MYSYu1yv9PFsmRPgAKGk5A onetrust-domain-verification=49280882734744dcabbfaadeb3461b2c onetrust-domain-verification=6bc567834121445384b6077cb6e8afef anthropic-domain-verification-kv28r4=ZfVCousFdYb80mnXy7VPHYL06 zoom-domain-verification = 6b92f302-c1a7-4e4f-8ec9-8eaf257af12b slack-domain-verification=xKnCUoFDpdlXja9hJNPLKHX0FLCKe0sdykBNbVnA google-site-verification=5q70TaAamSBg8f2gexe3fcEFgEqhyqclV0-4VgkbI7s google-site-verification=AGfUvVkjL9meSSNuLA75PmgTGHLYmykqTT7Ce-g88rY google-site-verification=BQe950Ny4H12LPrq3nX463djdqDtDcuZQF3k3-d6NxU google-site-verification=CM-L3d16YNO0e15SsBdJGPDKx0_1crb8vTm5vkLmC6k google-site-verification=FN0j932YtodsUHk8u5CSrN-WC3i4_VwZ-xa5ym7awdQ google-site-verification=IWgC1RiG-IsEUfC5AFNQzXVUHJO2BR7-xVTipEIQlec google-site-verification=ZzNmIdIl627l_6ar2mV4pSqhvFJtkYcfLZ962k1KRnY google-site-verification=gpZenQNezQEr73t2yLMsnF_gry0YgJzgpkYq6W5DGIQ apple-domain-verification=8u0Ek-_5Lp8mxGcRBVAKiKfGhvkXH3HEiEY4-LeBnls apple-domain-verification=LAB8xhMNFmSTMJwu7SSTUsZpOu22-rpPp9B9Rrcnsoo apple-domain-verification=_ZvKL6PpEZPpi48b9rUJSq6TrM_-RizDYjh_i4v6038 apple-domain-verification=fjunviKNr6WBcthwM7i9spdmv49RO24wosccHUsQk2g h1-domain-verification=pHHzEmL9oApG4ggd2wLDoA6azwUfzKruNcd7v5iPB3jP5ujK mgverify=38a3538020c90a4c88374e1efa5070d6391495967d03e54c10041cecf79972bd hubspot-developer-verification=MDBhOGRhNWUtNTk2MS00MzE3LTg4ZDUtZGJhNDg1NDJhYTQz hubspot-developer-verification=MDJiNTY5MjMtNWNhZi00ZDhmLTgxMzQtYzc5OTY0NTQ4ZmEz hubspot-developer-verification=MGIxNzNjZGYtNmUyZS00MWMzLTg5OGMtMDQ3MTY4N2RmZDY1 hubspot-developer-verification=MGYzYjkxYWItMWNiMy00MTIyLWFlYzItZWEzZDVkNjdmMzM4 stripe-verification=27C29C0CFD9F712A57B1297FAB27767A9E5B4F602E742CF0895FBEA1DBD470F3 drift-domain-verification=3541dd3ad16ae6eddffcc507951754ada8b86ead750ec5c0b15c121d6d551714 adobe-idp-site-verification=86c7121fb82e768f19ab6e628c528aa9134334f2e9c7b86a0a3c68f1cf378902 cisco-ci-domain-verification=3d468b9e2cd00e2567c38675a66c3a06c78b818c6ce596796357e0630e672bab atlassian-domain-verification=WXKa5/VcaS3xJ9EEfRIwU5FnU4Y1/qPXrimoN79BmpnAHMTBGDo6buWMhCegZVQb atlassian-domain-verification=jtsHBHsm9NkNrMUyu8WV1v8OW5ktqP/CFZJJF6vAd0BTyGxz3/l5xcBIakVIvZGK dell-technologies-domain-verification=docusign.com_31ef6946-1e18-4eaa-a1df-b5416c91e315_1758706056 v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ip4:205.220.176.129 ip4:205.220.164.129 ip4:205.220.166.129 ip4:205.220.177.61 include:_spf.google.com -all
TXT	_dmarc.docusign.com	v=DMARC1; p=reject; sp=reject; adkim=r; aspf=r; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com; fo=1;
CAA	docusign.com	—
DS	docusign.com	34436 8 2 50fae3e425bde1306e5c270700b32cb2c146cac9fb635567b81ac7fbe575c3e1

Fix priorities

Sorted by risk: severity first, confirmed issues before hardening gaps, then effort and score impact.

1MediumClickjacking protectionHardening gap+5
2MediumCSP — protection from script injectionHardening gap+5
3LowCAA — who may issue certificatesHardening gap+5
4LowReferrer-PolicyHardening gap+3
5LowPermissions-PolicyHardening gap+2

Indicative alignment

Best-practice mapping of public findings to common frameworks. Passive scanning tests public configuration only; it doesn't prove compliance or a violation.

Google & Yahoo sender rulesNo gaps observed
SPF, DKIM and DMARC are required for bulk senders to Gmail and Yahoo; missing them risks rejected or spam-foldered mail.
PCI DSS v4.02 observed gaps
TLS, certificate and browser-header protections relate to PCI DSS v4.0 requirements 4.2 and 6.4 for payment pages.
CSP — protection from script injection Clickjacking protection
NIS2 / vendor due diligence1 observed gaps
Vendor risk reviews under NIS2/DORA and cyber-insurance questionnaires check these public signals.
CAA — who may issue certificates
SOC 2 / ISO 27001 baseline2 observed gaps
Baseline external hygiene commonly expected in SOC 2 and ISO 27001 audits.
CSP — protection from script injection Clickjacking protection

Indicative alignment only, based on public configuration. It doesn't establish whether a framework applies to you, and it isn't legal advice, an audit or a certification.

Head-to-head vs competitor

How do you stack up against competitors?

The check reads public data only and makes no changes to the domain. Recommendations are intended for the domain owner.

Is your domain as secure? Scan it free, no sign-up

All pre-scanned domains

What to do first

Stop other sites from embedding your pages

This removes one way to trick visitors into clicking something on your site unknowingly.

Who can fix it: Your website developer or web host

How to verify after the fix

curl -sIL https://docusign.com/ | grep -i "X-Frame-Options"

Limit what scripts your pages are allowed to run

This adds one layer of protection against injected scripts.

Who can fix it: Your website developer or web host

How to verify after the fix

curl -sIL https://docusign.com/ | grep -i "Content-Security-Policy-Report-Only"

What this grade means

Tested hostname

docusign.com

Website request

GET https://docusign.com/ → https://www.docusign.com/

Scan time

2026-11-15 18:19:47 UTC

Grading method

Version 2How grading works

Unverified or excluded checks

None. Every applicable check was assessed.

Technical detail

Click a check to see the public data, a verification command, a safe fix recommendation and documentation sources.

Email security

30/30

Encryption & certificate

25/25

Browser protections

14/30

DNS infrastructure

10/15

Public DNS records

A	docusign.com	3.33.186.135 15.197.167.90
AAAA	docusign.com	—
MX	docusign.com	10 mxa-00567a01.gslb.pphosted.com 10 mxb-00567a01.gslb.pphosted.com
NS	docusign.com	a1-246.akam.net a10-65.akam.net a11-66.akam.net a14-67.akam.net a24-64.akam.net
TXT	docusign.com	MS=ms67859169 MS=ms75680623 1qrrz3xy28s3kb9mxsdwzmy2833rjr8d 3b9t4qnlb14b3j4f1zk8b6zkbhjl24sz 7cb4c0f6185b4c069917a859c6018188 _1n3zuex515pwaz9ux57pdo76zu6mw8p _7je1xuhn68icu22h534578y7d1d9jpg _g5xgrrxwbnpsohyhqy1gtb935rmb0q2 _ntm9vxjredwhj592dazupru4ypjuexq _x2tjmfhsbtiixj6uei9the03696pl86 _x9lx42qvkft4lvx5xnbrpf4ffa11cye nm7y5n5w3r41kh0mgm0hhfx0w22ml5pc mandrill_verify.Vnq0HszA1CepkTznip_FYA apple-domain-verification=L5oOwEIjTPfCi6qy 7kvhIewSmfzYT6xQKHexezvzAlieUeUZTnbhet91q10= SFMC-uwMHeqLPPYzwqQhUlD0eB8l0YUdd__hku8JPxB5g docusign=07cc1948-4667-458d-8221-2d01c6ec0423 docusign=9c3ea3d7-4aee-40a1-82df-ed91479a4356 jamf-site-verification=2t94XG2CN8VMI8lcBkkIjQ canva-site-verification=lKl3pnMYLTq05XjpXd-aRg bw=xnUy9wiC25MaMkPcRxA8xYZJztXH2PNy3k1fep88y4W5 traction-guest=94540d95-8b19-47a0-a6dc-cb43746fb4b6 bugcrowd-verification=a9aee6c6b285fc3c8a0a9429a51a56c6 docker-verification=8619c622-33ca-4c2e-823a-1ac5f9a40666 miro-verification=3bbe2265b6aac85cdf0d62480f55aa1f98d0f111 facebook-domain-verification=xmeljmwmkulb55922d6figl3y5byep mixpanel-domain-verify=0b9a84b6-63de-429c-8019-4b63be01fb1b snowflake-verification=62ea4659-01a0-1000-8010-0000000003eb aws-securityagent-domain-verification=MYSYu1yv9PFsmRPgAKGk5A onetrust-domain-verification=49280882734744dcabbfaadeb3461b2c onetrust-domain-verification=6bc567834121445384b6077cb6e8afef anthropic-domain-verification-kv28r4=ZfVCousFdYb80mnXy7VPHYL06 zoom-domain-verification = 6b92f302-c1a7-4e4f-8ec9-8eaf257af12b slack-domain-verification=xKnCUoFDpdlXja9hJNPLKHX0FLCKe0sdykBNbVnA google-site-verification=5q70TaAamSBg8f2gexe3fcEFgEqhyqclV0-4VgkbI7s google-site-verification=AGfUvVkjL9meSSNuLA75PmgTGHLYmykqTT7Ce-g88rY google-site-verification=BQe950Ny4H12LPrq3nX463djdqDtDcuZQF3k3-d6NxU google-site-verification=CM-L3d16YNO0e15SsBdJGPDKx0_1crb8vTm5vkLmC6k google-site-verification=FN0j932YtodsUHk8u5CSrN-WC3i4_VwZ-xa5ym7awdQ google-site-verification=IWgC1RiG-IsEUfC5AFNQzXVUHJO2BR7-xVTipEIQlec google-site-verification=ZzNmIdIl627l_6ar2mV4pSqhvFJtkYcfLZ962k1KRnY google-site-verification=gpZenQNezQEr73t2yLMsnF_gry0YgJzgpkYq6W5DGIQ apple-domain-verification=8u0Ek-_5Lp8mxGcRBVAKiKfGhvkXH3HEiEY4-LeBnls apple-domain-verification=LAB8xhMNFmSTMJwu7SSTUsZpOu22-rpPp9B9Rrcnsoo apple-domain-verification=_ZvKL6PpEZPpi48b9rUJSq6TrM_-RizDYjh_i4v6038 apple-domain-verification=fjunviKNr6WBcthwM7i9spdmv49RO24wosccHUsQk2g h1-domain-verification=pHHzEmL9oApG4ggd2wLDoA6azwUfzKruNcd7v5iPB3jP5ujK mgverify=38a3538020c90a4c88374e1efa5070d6391495967d03e54c10041cecf79972bd hubspot-developer-verification=MDBhOGRhNWUtNTk2MS00MzE3LTg4ZDUtZGJhNDg1NDJhYTQz hubspot-developer-verification=MDJiNTY5MjMtNWNhZi00ZDhmLTgxMzQtYzc5OTY0NTQ4ZmEz hubspot-developer-verification=MGIxNzNjZGYtNmUyZS00MWMzLTg5OGMtMDQ3MTY4N2RmZDY1 hubspot-developer-verification=MGYzYjkxYWItMWNiMy00MTIyLWFlYzItZWEzZDVkNjdmMzM4 stripe-verification=27C29C0CFD9F712A57B1297FAB27767A9E5B4F602E742CF0895FBEA1DBD470F3 drift-domain-verification=3541dd3ad16ae6eddffcc507951754ada8b86ead750ec5c0b15c121d6d551714 adobe-idp-site-verification=86c7121fb82e768f19ab6e628c528aa9134334f2e9c7b86a0a3c68f1cf378902 cisco-ci-domain-verification=3d468b9e2cd00e2567c38675a66c3a06c78b818c6ce596796357e0630e672bab atlassian-domain-verification=WXKa5/VcaS3xJ9EEfRIwU5FnU4Y1/qPXrimoN79BmpnAHMTBGDo6buWMhCegZVQb atlassian-domain-verification=jtsHBHsm9NkNrMUyu8WV1v8OW5ktqP/CFZJJF6vAd0BTyGxz3/l5xcBIakVIvZGK dell-technologies-domain-verification=docusign.com_31ef6946-1e18-4eaa-a1df-b5416c91e315_1758706056 v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ip4:205.220.176.129 ip4:205.220.164.129 ip4:205.220.166.129 ip4:205.220.177.61 include:_spf.google.com -all
TXT	_dmarc.docusign.com	v=DMARC1; p=reject; sp=reject; adkim=r; aspf=r; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com; fo=1;
CAA	docusign.com	—
DS	docusign.com	34436 8 2 50fae3e425bde1306e5c270700b32cb2c146cac9fb635567b81ac7fbe575c3e1

Indicative alignment

Best-practice mapping of public findings to common frameworks. Passive scanning tests public configuration only; it doesn't prove compliance or a violation.

Google & Yahoo sender rulesNo gaps observed

SPF, DKIM and DMARC are required for bulk senders to Gmail and Yahoo; missing them risks rejected or spam-foldered mail.

PCI DSS v4.02 observed gaps

TLS, certificate and browser-header protections relate to PCI DSS v4.0 requirements 4.2 and 6.4 for payment pages.

CSP — protection from script injection Clickjacking protection

NIS2 / vendor due diligence1 observed gaps

Vendor risk reviews under NIS2/DORA and cyber-insurance questionnaires check these public signals.

CAA — who may issue certificates

SOC 2 / ISO 27001 baseline2 observed gaps

Baseline external hygiene commonly expected in SOC 2 and ISO 27001 audits.

CSP — protection from script injection Clickjacking protection

Indicative alignment only, based on public configuration. It doesn't establish whether a framework applies to you, and it isn't legal advice, an audit or a certification.

docusign.com

Track your progress

Help someone else check their domain

What to do first

What this grade means

Get the badge

Scan history

AI fix plan

Scans to analyze

Technical detail

Email security

Encryption & certificate

Browser protections

DNS infrastructure

Public DNS records

Is your domain as secure? Scan it free, no sign-up

docusign.com

Track your progress

Help someone else check their domain

What to do first

What this grade means

Get the badge

Scan history

AI fix plan

Scans to analyze

Technical detail

Email security

Encryption & certificate

Browser protections

DNS infrastructure

Public DNS records

Is your domain as secure? Scan it free, no sign-up

Agent access & discovery signals