A privacy policy link or reference was detected on this page.
Notice of Privacy Practices
Pass
A Notice of Privacy Practices (NPP) reference was detected — required under HIPAA §164.520.
Terms of Service
Pass
A Terms of Service / Terms of Use / Terms & Conditions link was detected.
HIPAA Notice
Fail
No HIPAA Notice or policy page detected. Healthcare organizations should clearly communicate their HIPAA compliance posture.
Cookie Policy
Pass
A cookie policy, notice, or consent reference was detected.
Accessibility Statement
Pass
An accessibility statement, ADA compliance notice, or WCAG reference was detected.
Non-Discrimination Policy
Pass
A non-discrimination policy or Section 1557 notice was detected.
State Privacy Rights Notice
Fail
No state privacy rights notice found. Healthcare organizations should address state-level consumer privacy laws (CCPA/CPRA, VCDPA, Washington My Health MY Data Act, etc.) that may apply to their patients and website visitors.
2 external script(s) lack SRI integrity attributes: consent.cookiebot.com, aperture-staging.lt.agency. A compromised CDN could inject malicious code into your pages.
Server Information Disclosure:
Server headers expose version/technology: cloudflare, WP Engine. Remove or redact to avoid leaking infrastructure details.
7
HTTP → HTTPS Redirect:
HTTP requests are not redirected to HTTPS. Visitors on http:// receive an unencrypted connection.
8
Tracking Scripts:
1 third-party tracker(s) detected on this page.
9
Google Tag Manager:
Third-party tracking script detected on this page.
10
Contact Email Addresses:
Off-domain email(s) found: [email protected]. Consider using a @britepathmedical.com address.
11
Health Form Fields:
Health-related form content detected. Keywords: health, medical, diagnosis, patient, insurance, dob, ssn, condition. Ensure HIPAA-compliant safeguards are in place.
12
Tracker Exposure on Health Page:
Health-sensitive form content found alongside 1 tracker(s): Google Tag Manager. This may constitute a HIPAA/privacy violation.
13
HIPAA Notice:
No HIPAA Notice or policy page detected. Healthcare organizations should clearly communicate their HIPAA compliance posture.
14
State Privacy Rights Notice:
No state privacy rights notice found. Healthcare organizations should address state-level consumer privacy laws (CCPA/CPRA, VCDPA, Washington My Health MY Data Act, etc.) that may apply to their patients and website visitors.
15
Subresource Integrity (SRI):
2 external script(s) lack SRI integrity attributes: consent.cookiebot.com, aperture-staging.lt.agency. A compromised CDN could inject malicious code into your pages.
16
DKIM Record:
No DKIM record found on common selectors. Your mail provider may use a custom selector.
Ready to Fix These Issues?
Our specialists can remediate every finding, protect your patients, and keep your website secure.