Fix My Website
HIPAA Report

https://coremovementstudios.com

Oct 9, 2026 RPT-1673C3EE View Site

* Rescans available every 24 hours

HIGH PRIORITY
22 failed · 0 warnings

* We detected the following that may create HIPAA privacy or security risks on your website.

8
Passed
22
Failed
0
Warnings
30
Checks
SSL / TLS
Security Headers
Transport Security
Cookie Security
Tracking Scripts
Contact Emails
Health Data Safety
Privacy & Legal
Resource Integrity
SPF
DMARC
DKIM
22 Recommendations Available
See actionable steps to improve your HIPAA security score.
View Recommendations
Ready to fix these issues? Our specialists can remediate every finding.
Fix My Website →
SSL / TLS
1 passed
SSL/TLS Certificate Pass
Valid certificate - expires in 41 days (issued by Google Trust Services)
Security Headers
1 passed 5 failed
Fix My Website
HSTS Fail
Failed — page could not be fetched; security headers unverifiable.
X-Content-Type-Options Fail
Failed — page could not be fetched; security headers unverifiable.
X-Frame-Options Fail
Failed — page could not be fetched; security headers unverifiable.
Referrer-Policy Fail
Failed — page could not be fetched; security headers unverifiable.
Permissions-Policy Fail
Failed — page could not be fetched; security headers unverifiable.
Server Information Disclosure Pass
Server and technology headers do not expose version information.
Cookie Security
1 passed
Cookie Security Flags Pass
All 1 cookie(s) include Secure, HttpOnly, and SameSite attributes.
Transport Security
2 passed 1 failed
Fix My Website
HTTP → HTTPS Redirect Pass
HTTP traffic correctly redirects to HTTPS.
TLS Version Pass
Server enforces TLS 1.2 or higher - deprecated protocol versions are rejected.
Mixed Content Fail
Failed — page could not be fetched; mixed content unverifiable.
Tracking & Analytics
1 failed
Fix My Website
Tracking Scripts Fail
Failed — page could not be fetched; tracking scripts unverifiable.
Contact Email Quality
1 failed
Fix My Website
Contact Email Addresses Fail
Failed — page could not be fetched; email addresses unverifiable.
Health Data Safety
3 failed
Fix My Website
HTTPS Enforcement Fail
Failed — page could not be fetched; health data safety unverifiable.
Health Form Fields Fail
Failed — page could not be fetched; health data safety unverifiable.
Third-Party Tracker Exposure Fail
Failed — page could not be fetched; health data safety unverifiable.
Privacy & Legal
10 failed
Fix My Website
Privacy Policy Fail
Failed — page could not be fetched; privacy & legal checks unverifiable.
Notice of Privacy Practices Fail
Failed — page could not be fetched; privacy & legal checks unverifiable.
Terms of Service Fail
Failed — page could not be fetched; privacy & legal checks unverifiable.
HIPAA Notice Fail
Failed — page could not be fetched; privacy & legal checks unverifiable.
Cookie Policy Fail
Failed — page could not be fetched; privacy & legal checks unverifiable.
Accessibility Statement Fail
Failed — page could not be fetched; privacy & legal checks unverifiable.
Non-Discrimination Policy Fail
Failed — page could not be fetched; privacy & legal checks unverifiable.
State Privacy Rights Notice Fail
Failed — page could not be fetched; privacy & legal checks unverifiable.
Form Service Compliance Fail
Failed — page could not be fetched; privacy & legal checks unverifiable.
Chat Widget Risk Fail
Failed — page could not be fetched; privacy & legal checks unverifiable.
Resource Integrity
1 failed
Fix My Website
Subresource Integrity (SRI) Fail
Failed — page could not be fetched; SRI unverifiable.
Email Authentication
3 passed
SPF Record Pass
v=spf1 include:secureserver.net -all
DMARC Record Pass
v=DMARC1; p=quarantine; adkim=r; aspf=r; rua=mailto:[email protected];
DKIM Record Pass
Found on selector 'selector1': v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQW48C8KI81PKgit1w…
✨

Get an AI summary of this report

Open a new chat with your report pre-loaded

ChatGPT Claude Gemini
22 Recommendations
1
HSTS: Failed — page could not be fetched; security headers unverifiable.
2
X-Content-Type-Options: Failed — page could not be fetched; security headers unverifiable.
3
X-Frame-Options: Failed — page could not be fetched; security headers unverifiable.
4
Referrer-Policy: Failed — page could not be fetched; security headers unverifiable.
5
Permissions-Policy: Failed — page could not be fetched; security headers unverifiable.
6
Mixed Content: Failed — page could not be fetched; mixed content unverifiable.
7
Tracking Scripts: Failed — page could not be fetched; tracking scripts unverifiable.
8
Contact Email Addresses: Failed — page could not be fetched; email addresses unverifiable.
9
HTTPS Enforcement: Failed — page could not be fetched; health data safety unverifiable.
10
Health Form Fields: Failed — page could not be fetched; health data safety unverifiable.
11
Third-Party Tracker Exposure: Failed — page could not be fetched; health data safety unverifiable.
12
Privacy Policy: Failed — page could not be fetched; privacy & legal checks unverifiable.
13
Notice of Privacy Practices: Failed — page could not be fetched; privacy & legal checks unverifiable.
14
Terms of Service: Failed — page could not be fetched; privacy & legal checks unverifiable.
15
HIPAA Notice: Failed — page could not be fetched; privacy & legal checks unverifiable.
16
Cookie Policy: Failed — page could not be fetched; privacy & legal checks unverifiable.
17
Accessibility Statement: Failed — page could not be fetched; privacy & legal checks unverifiable.
18
Non-Discrimination Policy: Failed — page could not be fetched; privacy & legal checks unverifiable.
19
State Privacy Rights Notice: Failed — page could not be fetched; privacy & legal checks unverifiable.
20
Form Service Compliance: Failed — page could not be fetched; privacy & legal checks unverifiable.
21
Chat Widget Risk: Failed — page could not be fetched; privacy & legal checks unverifiable.
22
Subresource Integrity (SRI): Failed — page could not be fetched; SRI unverifiable.
Ready to Fix These Issues?
Our specialists can remediate every finding, protect your patients, and keep your website secure.
Fix My Website →