Fix My Website
HIPAA Report

https://kellyreeddaulton.com

Oct 9, 2026 RPT-8C4A9FE9 View Site

* Rescans available every 24 hours

HIGH PRIORITY
22 failed · 4 warnings

* We detected the following that may create HIPAA privacy or security risks on your website.

4
Passed
22
Failed
4
Warnings
30
Checks
SSL / TLS
Security Headers
Transport Security
Cookie Security
Tracking Scripts
Contact Emails
Health Data Safety
Privacy & Legal
Resource Integrity
SPF
DMARC
DKIM
26 Recommendations Available
See actionable steps to improve your HIPAA security score.
View Recommendations
Ready to fix these issues? Our specialists can remediate every finding.
Fix My Website →
SSL / TLS
1 warning
Fix My Website
SSL/TLS Certificate Warning
Certificate expires in only 24 days - renew soon! (issued by GoDaddy.com)
Cloudflare Bot Protection Detected
Page Blocked by Cloudflare
Cloudflare JS challenge returned - a real browser is required. SSL/TLS and email auth checks still run. Page content checks skipped.
Security Headers
1 passed 5 failed
Fix My Website
HSTS Fail
Skipped — Cloudflare blocked access; headers could not be verified.
X-Content-Type-Options Fail
Skipped — Cloudflare blocked access; headers could not be verified.
X-Frame-Options Fail
Skipped — Cloudflare blocked access; headers could not be verified.
Referrer-Policy Fail
Skipped — Cloudflare blocked access; headers could not be verified.
Permissions-Policy Fail
Skipped — Cloudflare blocked access; headers could not be verified.
Server Information Disclosure Pass
Server and technology headers do not expose version information.
Cookie Security
1 warning
Fix My Website
Cookie Security Flags Warning
1 cookie(s) missing SameSite attribute. Missing flags expose session cookies to hijacking.
Transport Security
2 passed 1 failed
Fix My Website
HTTP → HTTPS Redirect Pass
HTTP traffic correctly redirects to HTTPS.
TLS Version Pass
Server enforces TLS 1.2 or higher - deprecated protocol versions are rejected.
Mixed Content Fail
Failed — Cloudflare blocked access; mixed content could not be verified.
Tracking & Analytics
1 failed
Fix My Website
Tracking Scripts Fail
Failed — Cloudflare blocked access; tracking scripts could not be verified.
Contact Email Quality
1 failed
Fix My Website
Contact Email Addresses Fail
Failed — Cloudflare blocked access; email addresses could not be verified.
Health Data Safety
3 failed
Fix My Website
HTTPS Enforcement Fail
Failed — Cloudflare blocked access; health data safety could not be verified.
Health Form Fields Fail
Failed — Cloudflare blocked access; health data safety could not be verified.
Third-Party Tracker Exposure Fail
Failed — Cloudflare blocked access; health data safety could not be verified.
Privacy & Legal
10 failed
Fix My Website
Privacy Policy Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Notice of Privacy Practices Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Terms of Service Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
HIPAA Notice Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Cookie Policy Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Accessibility Statement Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Non-Discrimination Policy Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
State Privacy Rights Notice Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Form Service Compliance Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Chat Widget Risk Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Resource Integrity
1 failed
Fix My Website
Subresource Integrity (SRI) Fail
Failed — Cloudflare blocked access; SRI could not be verified.
Email Authentication
1 passed 2 warning
Fix My Website
SPF Record Pass
v=spf1 include:secureserver.net -all
DMARC Record Warning
DMARC found but policy is 'none' - no enforcement, email spoofing is not blocked. Upgrade to p=quarantine or p=reject. Record: v=DMARC1; p=none;
DKIM Record Warning
No DKIM record found on common selectors. Your mail provider may use a custom selector.
✨

Get an AI summary of this report

Open a new chat with your report pre-loaded

ChatGPT Claude Gemini
26 Recommendations
1
SSL/TLS Certificate: Certificate expires in only 24 days - renew soon! (issued by GoDaddy.com)
2
HSTS: Skipped — Cloudflare blocked access; headers could not be verified.
3
X-Content-Type-Options: Skipped — Cloudflare blocked access; headers could not be verified.
4
X-Frame-Options: Skipped — Cloudflare blocked access; headers could not be verified.
5
Referrer-Policy: Skipped — Cloudflare blocked access; headers could not be verified.
6
Permissions-Policy: Skipped — Cloudflare blocked access; headers could not be verified.
7
Cookie Security Flags: 1 cookie(s) missing SameSite attribute. Missing flags expose session cookies to hijacking.
8
Mixed Content: Failed — Cloudflare blocked access; mixed content could not be verified.
9
Tracking Scripts: Failed — Cloudflare blocked access; tracking scripts could not be verified.
10
Contact Email Addresses: Failed — Cloudflare blocked access; email addresses could not be verified.
11
HTTPS Enforcement: Failed — Cloudflare blocked access; health data safety could not be verified.
12
Health Form Fields: Failed — Cloudflare blocked access; health data safety could not be verified.
13
Third-Party Tracker Exposure: Failed — Cloudflare blocked access; health data safety could not be verified.
14
Privacy Policy: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
15
Notice of Privacy Practices: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
16
Terms of Service: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
17
HIPAA Notice: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
18
Cookie Policy: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
19
Accessibility Statement: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
20
Non-Discrimination Policy: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
21
State Privacy Rights Notice: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
22
Form Service Compliance: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
23
Chat Widget Risk: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
24
Subresource Integrity (SRI): Failed — Cloudflare blocked access; SRI could not be verified.
25
DMARC Record: DMARC found but policy is 'none' - no enforcement, email spoofing is not blocked. Upgrade to p=quarantine or p=reject. Record: v=DMARC1; p=none;
26
DKIM Record: No DKIM record found on common selectors. Your mail provider may use a custom selector.
Ready to Fix These Issues?
Our specialists can remediate every finding, protect your patients, and keep your website secure.
Fix My Website →