Fix My Website
HIPAA Report

https://integrityuc.com

Oct 8, 2026 RPT-E310F3B7 View Site

* Rescans available every 24 hours

HIGH PRIORITY
1 failed · 4 warnings

* We detected the following that may create HIPAA privacy or security risks on your website.

25
Passed
1
Failed
4
Warnings
30
Checks
SSL / TLS
Security Headers
Transport Security
Cookie Security
Tracking Scripts
Contact Emails
Health Data Safety
Privacy & Legal
Resource Integrity
SPF
DMARC
DKIM
5 Recommendations Available
See actionable steps to improve your HIPAA security score.
View Recommendations
Ready to fix these issues? Our specialists can remediate every finding.
Fix My Website →
SSL / TLS
1 passed
SSL/TLS Certificate Pass
Valid certificate - expires in 161 days (issued by GoDaddy.com)
Security Headers
5 passed 1 warning
Fix My Website
HSTS Pass
✓ max-age=63072000; includeSubDomains; preload
X-Content-Type-Options Pass
✓ nosniff
X-Frame-Options Pass
✓ SAMEORIGIN
Referrer-Policy Pass
✓ strict-origin-when-cross-origin
Permissions-Policy Pass
✓ camera=(), microphone=(), geolocation=(self), interest-cohort=()
Server Information Disclosure Warning
Server headers expose version/technology: Next.js. Remove or redact to avoid leaking infrastructure details.
Cookie Security
1 passed
Cookie Security Flags Pass
No cookies were set by this page - no cookie security issues.
Transport Security
3 passed
HTTP → HTTPS Redirect Pass
HTTP traffic correctly redirects to HTTPS.
TLS Version Pass
Server enforces TLS 1.2 or higher - deprecated protocol versions are rejected.
Mixed Content Pass
No HTTP resources found loading on this HTTPS page.
Tracking & Analytics
1 passed
Tracking Scripts Pass
No known third-party tracking scripts detected.
Contact Email Quality
1 warning
Fix My Website
Contact Email Addresses Warning
Off-domain email(s) found: [email protected], [email protected], [email protected], [email protected]. Consider using a @integrityuc.com address.
Health Data Safety
2 passed 1 warning
Fix My Website
HTTPS Enforcement Pass
Page served over HTTPS.
Health Form Fields Warning
Health-related form content detected. Keywords: health, medical, patient, insurance, dob, ssn, condition, hipaa. Ensure HIPAA-compliant safeguards are in place.
Tracker Exposure on Health Page Pass
Health form content detected - no third-party trackers present.
Privacy & Legal
9 passed 1 failed
Fix My Website
Privacy Policy Pass
A privacy policy link or reference was detected on this page.
Notice of Privacy Practices Pass
A Notice of Privacy Practices (NPP) reference was detected — required under HIPAA §164.520.
Terms of Service Pass
A Terms of Service / Terms of Use / Terms & Conditions link was detected.
HIPAA Notice Pass
A HIPAA Notice or dedicated HIPAA policy page was detected.
Cookie Policy Pass
A cookie policy, notice, or consent reference was detected.
Accessibility Statement Pass
An accessibility statement, ADA compliance notice, or WCAG reference was detected.
Non-Discrimination Policy Pass
A non-discrimination policy or Section 1557 notice was detected.
State Privacy Rights Notice Fail
No state privacy rights notice found. Healthcare organizations should address state-level consumer privacy laws (CCPA/CPRA, VCDPA, Washington My Health MY Data Act, etc.) that may apply to their patients and website visitors.
Form Service Compliance Pass
No known non-HIPAA form services detected.
Chat Widget Risk Pass
No known non-HIPAA chat widgets detected.
Resource Integrity
1 passed
Subresource Integrity (SRI) Pass
All external scripts include integrity attributes, or no external CDN scripts were found.
Email Authentication
2 passed 1 warning
Fix My Website
SPF Record Pass
v=spf1 include:spf.protection.outlook.com -all
DMARC Record Warning
DMARC found but policy is 'none' - no enforcement, email spoofing is not blocked. Upgrade to p=quarantine or p=reject. Record: v=DMARC1; p=none;
DKIM Record Pass
Found on selector 's1': k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA522TOvQM5df0T5dnGadd7q…
✨

Get an AI summary of this report

Open a new chat with your report pre-loaded

ChatGPT Claude Gemini
5 Recommendations
1
Server Information Disclosure: Server headers expose version/technology: Next.js. Remove or redact to avoid leaking infrastructure details.
2
Contact Email Addresses: Off-domain email(s) found: [email protected], [email protected], [email protected], [email protected]. Consider using a @integrityuc.com address.
3
Health Form Fields: Health-related form content detected. Keywords: health, medical, patient, insurance, dob, ssn, condition, hipaa. Ensure HIPAA-compliant safeguards are in place.
4
State Privacy Rights Notice: No state privacy rights notice found. Healthcare organizations should address state-level consumer privacy laws (CCPA/CPRA, VCDPA, Washington My Health MY Data Act, etc.) that may apply to their patients and website visitors.
5
DMARC Record: DMARC found but policy is 'none' - no enforcement, email spoofing is not blocked. Upgrade to p=quarantine or p=reject. Record: v=DMARC1; p=none;
Ready to Fix These Issues?
Our specialists can remediate every finding, protect your patients, and keep your website secure.
Fix My Website →