Diagnostics

Metrics

A CAA record was discovered. A CAA record is used to specify which certificate authorities (CAs) are allowed to issue certificates for a domain.

CAA Record

An NS record was detected. An NS record delegates a subdomain to a set of name servers.

NS Record Detection

Email Extractor

Setting the XSS-Protection header is deprecated. Setting the header to anything other than `0` can actually introduce an XSS vulnerability.

XSS-Protection Header - Cross-Site Scripting

An ActiveAdmin Admin dashboard was discovered.

ActiveAdmin Admin Dasboard Exposure

FingerprintHub Technology Fingerprint tests run in nuclei.

FingerprintHub Technology Fingerprint

Wappalyzer Technology Detection

A template to detect HTML Forms in page response.


Form Detection

This template searches for missing HTTP security headers. The impact of these missing headers can vary.


HTTP Missing Security Headers

RDAP (Registration Data Access Protocol) is a standard defined by the IETF to replace the whois protocol
in queries for information about Internet resource records such as domain names, IP addresses, and ASNs.


RDAP WHOIS

Checks if external script and stylesheet tags in the HTML response are missing the Subresource Integrity (SRI) attribute.


Missing Subresource Integrity

As per guideline one should protect purges with ACLs from unauthorized hosts.

Varnish Unauthenticated Cache Purge

WAF Detection

Extract the issuer's organization from the target's certificate. Issuers are entities which sign and distribute certificates.


Detect SSL Certificate Issuer

Extract the Subject Alternative Name (SAN) from the target's certificate. SAN facilitates the usage of additional hostnames with the same certificate.


SSL DNS Names

TLS version detection is a security process used to determine the version of the Transport Layer Security (TLS) protocol used by a computer or server.
It is important to detect the TLS version in order to ensure secure communication between two computers or servers.


TLS Version - Detect

Atlas culture

Websites that have a shopping cart or checkout page, either using a known ecommerce platform or a custom solution.

Cart Functionality

Ruby is an open-source object-oriented programming language.

Ruby

Leaflet is the open-source JavaScript library for mobile-friendly interactive maps.

Leaflet

Highcharts is a charting library written in pure JavaScript, for adding interactive charts to a website or web application. Highcharts meets accessibility standards and works with Python, Angular, React, iOS, Android, and more.

Highcharts

Mapbox.js is a JavaScript library provided by Mapbox for working with interactive maps and geospatial data.

Mapbox.js

Mapbox GL JS is a JavaScript library that uses WebGL to render interactive maps from vector tiles and Mapbox styles.

Mapbox GL JS

Ruby on Rails is a server-side web application framework written in Ruby under the MIT License.

Ruby on Rails

Varnish

Platform.sh

Turbolinks is a Rails feature, available as a gem and enabled by default in new Rails apps. It is intended to speed up navigating between pages of your application.

Turbolinks

Livefyre is a platform that integrates with the social web to boost social interaction.

Livefyre

JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.

jsDelivr

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

https://atlasculture.fr/

LightHouse

https://atlasculture.fr/environ 2 heures

Système de design de l'état

Eco-index

GES: 1.52 gramme(s) par visite

Eau : 2.28 cl par visite

Ça veut dire quoi ?

Cookies

Scripts tiers

Déclaration de mise en accessibilité

Conformité partielle