Automated public DNS and web checks; results may be incomplete. These are passive observations, not an assessment of the organization.

F55/100

Executive summary

mit.edu

Critical findings in the observed public configuration. Some basic protections were not detected.

Full coverage: every applicable check was assessed.

2026-11-15 18:29 UTC

Print report / PDF

Useful for your IT provider or a colleague. Anyone with the link can view the report.

Track your progress

Fix the findings, then come back and rescan. Your scan history is saved in this browser so you can see exactly what improved.

Email security20/30

Needs attention

Spoofing email in the company's name is possible in some cases.

Encryption & certificate18/25

Needs attention

Encryption is in place, but a gap could expose users.

Browser protections14/30

Critical

Several browser hardening headers are missing, which removes layers of protection against script injection and framing.

DNS infrastructure3/15

Critical

The domain's infrastructure lacks basic protections.

Help someone else check their domain

Share this public report with a colleague. They can review the evidence and check their own domain.

Get the report badge

What to do first

1.
Tell receiving mail servers how to treat fake email from your domain
Without this policy, inboxes have less guidance for spotting messages that impersonate you.
Who can fix it: Your email provider, together with whoever manages your DNS
How to verify after the fix
```
dig +short TXT _dmarc.mit.edu
```
2.
Send visitors to the secure version of your site
Visitors who type your address without https may stay on an unprotected connection.
Who can fix it: Your web host
How to verify after the fix
```
curl -sI http://mit.edu/ | grep -iE "^(HTTP|location)"
```

A starting point, not a security guarantee.

What this grade means

Tested hostname: mit.edu
Website request: GET https://mit.edu/ → https://web.mit.edu/
Scan time: 2026-11-15 18:29:24 UTC
Grading method: Version 2How grading works
Unverified or excluded checks: None. Every applicable check was assessed.

This is a snapshot of the public configuration checks listed in this report. It does not verify the site's owner, business legitimacy, application security, or absence of vulnerabilities. It is not a security certification.

Get the badge

Show the live grade for mit.edu in a README, docs or site footer. The badge links to the public report and refreshes every 24 hours.

Scan shown on this page: ⁦2026-11-15 18:29:24 UTC⁩. The badge may display a cached result for up to 24 hours. Open the linked report to check its scan time.

Markdown

[![Domain Armor grade](https://getmirror.online/badge/mit.edu.svg)](https://getmirror.online/report/mit.edu)

HTML

<a href="https://getmirror.online/report/mit.edu"><img src="https://getmirror.online/badge/mit.edu.svg" alt="Domain Armor grade"></a>

Badge URL

https://getmirror.online/badge/mit.edu.svg

Scan history

AI fix plan

Pick scans from this browser's history. The AI compares them, explains what changed and builds a prioritized, step-by-step plan.

Scans to analyze

0 of 6 selected

F55/10011/15/26, 06:29 PMCurrent

The current scan is always included.

AI-generated from your scan results only. Review each step before applying it; nothing is sent to or changed on the domain.

Technical detail

Click a check to see the public data, a verification command, a safe fix recommendation and documentation sources.

Email security

20/30

Encryption & certificate

18/25

Browser protections

14/30

DNS infrastructure

3/15

Public DNS records

A	mit.edu	23.198.175.132
AAAA	mit.edu	2600:1409:9800:1a8b::255e 2600:1409:9800:1a82::255e
MX	mit.edu	100 mit-edu.mail.protection.outlook.com
NS	mit.edu	asia1.akam.net ns1-37.akam.net asia2.akam.net usw2.akam.net eur5.akam.net use2.akam.net use5.akam.net ns1-173.akam.net
TXT	mit.edu	E58E872724E5FA64C802DD4A74C404BC google-site-verification=b4-1loZHD1WzNmews_hsTTKL__gLblD6iKBFbA4j97c anthropic-domain-verification-4zkzdh=QhN4rrjaqMvpem4OLpNCpsSJP E2MA-VERIFICATION=86JGB e2ma-verification=uviib atlassian-domain-verification=3eRva0Gy/EjVyKEw46uExfEXpDGJfhwocwVCy5NTxcPpf89AqdK3Lkc2Ert/Mram 1VNZ334aKc8FypCKDhIMOQBsKFd8gCgTFQuPlDwQfzPNxPCKonTOnhuFQ8+kE32E2TgkBiOp9EFab5nfVc+38g== airtable-manual-domain-verification=ce83c94e-0127-4fd3-9265-3b37a46a7b8a openai-domain-verification=dv-pavuNIk1XG88x99BoqSFI0Zs google-site-verification=qNAffaSjUkhb2JCBb1BQ2nXAkcNYLeLc7G6vjMRD1js e2ma-verification=xlabb ecgkc7fnflsm01hh6uqjr86h02 include:4920340.spf07.hubspotemail.net stripe-verification=fe726543b783764b2ba9137f4e675faa0709416ac7a5d9f50e21248a706ad93d e2ma-verification=oiiib adobe-idp-site-verification=0817e32603f0dda03188b9f1f3bbaf4f754c5322926036af8890df7bf65cb90d jamf-site-verification=Zb92YEBOKGMV1yFAEtYd1w pardot_310211_=a4e9728d1b90355b6240f4d7778cc4da11c10a20552ae99e6ed03d8e48c06583 E2MA-VERIFICATION=8AWBB airtable-verification=c8040e640f7deab69a01d68c91893e07 SFMC-KEayLiyP3trXiklQXNlhx4xxcSVQpab8z-3XJVmA amazonses:asyYfDTQj+TCy9t5jFbakgwGbomDqXREEs3KdC0iMQE= 6B22D05A50CCFD8AEDE263D10A43B5F2 87EDC6C34B18248C3196DDDF99E346F0 E2MA-VERIFICATION=C8D4 airtable-verification=46ae122907d40a1413b6a05898774435 mgverify=2a07014ab707abf9b6f984210c05ef7a1fd905296aebe173776844c14db61c1e mandrill_verify.28vVgPhRZLda1o_v90CPWg v=spf1 include:_s00430413.autospf.email -all e2ma-verification=piiib e2ma-verification=xiiib atlassian-domain-verification=3Ex0JUvwojvbDLOJvNHnYUFEZCF+kwii0OjHbhDkymB97xpCOkkIFUoET2RQy15E atlassian-domain-verification=maRNLIMivtdhvCr9JoVuLKHWRn7mZOY8072lyRNeyamz0NHc/s0b0m3R3yt1NKK3 asv=d035bbd54ef96bf2ffd1479e55ae0860 fastly-domain-delegation-hnb9joooe7gojgqu4eth-00494769-2025-08-23 google-site-verification=pqf9o422iIeT7mzfZmQwkpLYH3VTlB05OC9c_OncFOg google-site-verification=6ethhhET4cfz7L1Dfve9bCOTAqMr6IU79Va6gb8HxlA airtable-verification=4283ac2aa983e97636807d478d6bf30c E2MA-VERIFICATION=MONGB airtable-verification=dd819f16a069eee2e4e6cc433b24e9e5 bWl0ZWR1
TXT	_dmarc.mit.edu	v=DMARC1; p=none; rua=mailto:dmarcreports@mit.edu
CAA	mit.edu	—
DS	mit.edu	—

Fix priorities

Sorted by risk: severity first, confirmed issues before hardening gaps, then effort and score impact.

1HighHTTP → HTTPS redirectHardening gap+7
2MediumHSTS — enforce encryption in the browserHardening gap+4
3MediumDMARC — anti-spoofing policyHardening gap+10
4MediumDNSSEC — signed DNS recordsHardening gap+7
5LowCAA — who may issue certificatesHardening gap+5
6LowX-Content-Type-OptionsHardening gap+4
7LowReferrer-PolicyHardening gap+3
8LowPermissions-PolicyHardening gap+2
9LowCSP — protection from script injectionHardening gap+3

Indicative alignment

Best-practice mapping of public findings to common frameworks. Passive scanning tests public configuration only; it doesn't prove compliance or a violation.

Google & Yahoo sender rules1 observed gaps
SPF, DKIM and DMARC are required for bulk senders to Gmail and Yahoo; missing them risks rejected or spam-foldered mail.
DMARC — anti-spoofing policy
PCI DSS v4.03 observed gaps
TLS, certificate and browser-header protections relate to PCI DSS v4.0 requirements 4.2 and 6.4 for payment pages.
HTTP → HTTPS redirect HSTS — enforce encryption in the browser CSP — protection from script injection
NIS2 / vendor due diligence4 observed gaps
Vendor risk reviews under NIS2/DORA and cyber-insurance questionnaires check these public signals.
DMARC — anti-spoofing policy HSTS — enforce encryption in the browser DNSSEC — signed DNS records CAA — who may issue certificates
SOC 2 / ISO 27001 baseline4 observed gaps
Baseline external hygiene commonly expected in SOC 2 and ISO 27001 audits.
DMARC — anti-spoofing policy HSTS — enforce encryption in the browser CSP — protection from script injection X-Content-Type-Options

Indicative alignment only, based on public configuration. It doesn't establish whether a framework applies to you, and it isn't legal advice, an audit or a certification.

Head-to-head vs competitor

How do you stack up against competitors?

The check reads public data only and makes no changes to the domain. Recommendations are intended for the domain owner.

Is your domain as secure? Scan it free, no sign-up

All pre-scanned domains

mit.edu

Critical findings in the observed public configuration. Some basic protections were not detected.

Full coverage: every applicable check was assessed.

2026-11-15 18:29 UTC

Useful for your IT provider or a colleague. Anyone with the link can view the report.

What to do first

Tell receiving mail servers how to treat fake email from your domain

Without this policy, inboxes have less guidance for spotting messages that impersonate you.

Who can fix it: Your email provider, together with whoever manages your DNS

How to verify after the fix

dig +short TXT _dmarc.mit.edu

Send visitors to the secure version of your site

Visitors who type your address without https may stay on an unprotected connection.

Who can fix it: Your web host

How to verify after the fix

curl -sI http://mit.edu/ | grep -iE "^(HTTP|location)"

What this grade means

Tested hostname

mit.edu

Website request

GET https://mit.edu/ → https://web.mit.edu/

Scan time

2026-11-15 18:29:24 UTC

Grading method

Version 2How grading works

Unverified or excluded checks

None. Every applicable check was assessed.

Technical detail

Click a check to see the public data, a verification command, a safe fix recommendation and documentation sources.

Email security

20/30

Encryption & certificate

18/25

Browser protections

14/30

DNS infrastructure

3/15

Public DNS records

A	mit.edu	23.198.175.132
AAAA	mit.edu	2600:1409:9800:1a8b::255e 2600:1409:9800:1a82::255e
MX	mit.edu	100 mit-edu.mail.protection.outlook.com
NS	mit.edu	asia1.akam.net ns1-37.akam.net asia2.akam.net usw2.akam.net eur5.akam.net use2.akam.net use5.akam.net ns1-173.akam.net
TXT	mit.edu	E58E872724E5FA64C802DD4A74C404BC google-site-verification=b4-1loZHD1WzNmews_hsTTKL__gLblD6iKBFbA4j97c anthropic-domain-verification-4zkzdh=QhN4rrjaqMvpem4OLpNCpsSJP E2MA-VERIFICATION=86JGB e2ma-verification=uviib atlassian-domain-verification=3eRva0Gy/EjVyKEw46uExfEXpDGJfhwocwVCy5NTxcPpf89AqdK3Lkc2Ert/Mram 1VNZ334aKc8FypCKDhIMOQBsKFd8gCgTFQuPlDwQfzPNxPCKonTOnhuFQ8+kE32E2TgkBiOp9EFab5nfVc+38g== airtable-manual-domain-verification=ce83c94e-0127-4fd3-9265-3b37a46a7b8a openai-domain-verification=dv-pavuNIk1XG88x99BoqSFI0Zs google-site-verification=qNAffaSjUkhb2JCBb1BQ2nXAkcNYLeLc7G6vjMRD1js e2ma-verification=xlabb ecgkc7fnflsm01hh6uqjr86h02 include:4920340.spf07.hubspotemail.net stripe-verification=fe726543b783764b2ba9137f4e675faa0709416ac7a5d9f50e21248a706ad93d e2ma-verification=oiiib adobe-idp-site-verification=0817e32603f0dda03188b9f1f3bbaf4f754c5322926036af8890df7bf65cb90d jamf-site-verification=Zb92YEBOKGMV1yFAEtYd1w pardot_310211_=a4e9728d1b90355b6240f4d7778cc4da11c10a20552ae99e6ed03d8e48c06583 E2MA-VERIFICATION=8AWBB airtable-verification=c8040e640f7deab69a01d68c91893e07 SFMC-KEayLiyP3trXiklQXNlhx4xxcSVQpab8z-3XJVmA amazonses:asyYfDTQj+TCy9t5jFbakgwGbomDqXREEs3KdC0iMQE= 6B22D05A50CCFD8AEDE263D10A43B5F2 87EDC6C34B18248C3196DDDF99E346F0 E2MA-VERIFICATION=C8D4 airtable-verification=46ae122907d40a1413b6a05898774435 mgverify=2a07014ab707abf9b6f984210c05ef7a1fd905296aebe173776844c14db61c1e mandrill_verify.28vVgPhRZLda1o_v90CPWg v=spf1 include:_s00430413.autospf.email -all e2ma-verification=piiib e2ma-verification=xiiib atlassian-domain-verification=3Ex0JUvwojvbDLOJvNHnYUFEZCF+kwii0OjHbhDkymB97xpCOkkIFUoET2RQy15E atlassian-domain-verification=maRNLIMivtdhvCr9JoVuLKHWRn7mZOY8072lyRNeyamz0NHc/s0b0m3R3yt1NKK3 asv=d035bbd54ef96bf2ffd1479e55ae0860 fastly-domain-delegation-hnb9joooe7gojgqu4eth-00494769-2025-08-23 google-site-verification=pqf9o422iIeT7mzfZmQwkpLYH3VTlB05OC9c_OncFOg google-site-verification=6ethhhET4cfz7L1Dfve9bCOTAqMr6IU79Va6gb8HxlA airtable-verification=4283ac2aa983e97636807d478d6bf30c E2MA-VERIFICATION=MONGB airtable-verification=dd819f16a069eee2e4e6cc433b24e9e5 bWl0ZWR1
TXT	_dmarc.mit.edu	v=DMARC1; p=none; rua=mailto:dmarcreports@mit.edu
CAA	mit.edu	—
DS	mit.edu	—

Indicative alignment

Best-practice mapping of public findings to common frameworks. Passive scanning tests public configuration only; it doesn't prove compliance or a violation.

Indicative alignment only, based on public configuration. It doesn't establish whether a framework applies to you, and it isn't legal advice, an audit or a certification.

mit.edu

Track your progress

Help someone else check their domain

What to do first

What this grade means

Get the badge

Scan history

AI fix plan

Scans to analyze

Technical detail

Email security

Encryption & certificate

Browser protections

DNS infrastructure

Public DNS records

Is your domain as secure? Scan it free, no sign-up

mit.edu

Track your progress

Help someone else check their domain

What to do first

What this grade means

Get the badge

Scan history

AI fix plan

Scans to analyze

Technical detail

Email security

Encryption & certificate

Browser protections

DNS infrastructure

Public DNS records

Is your domain as secure? Scan it free, no sign-up

Agent access & discovery signals