Fix My Website
HIPAA Report

https://martellchiro.com

Oct 12, 2026 RPT-7D7D859C View Site

* Rescans available every 24 hours

HIGH PRIORITY
25 failed · 1 warning

* We detected the following that may create HIPAA privacy or security risks on your website.

4
Passed
25
Failed
1
Warnings
30
Checks
SSL / TLS
Security Headers
Transport Security
Cookie Security
Tracking Scripts
Contact Emails
Health Data Safety
Privacy & Legal
Resource Integrity
SPF
DMARC
DKIM
26 Recommendations Available
See actionable steps to improve your HIPAA security score.
View Recommendations
Ready to fix these issues? Our specialists can remediate every finding.
Fix My Website →
SSL / TLS
1 passed
SSL/TLS Certificate Pass
Valid certificate - expires in 75 days (issued by Google Trust Services)
Cloudflare Bot Protection Detected
Page Blocked by Cloudflare
Access denied (HTTP 403) - IP or bot score blocked by Cloudflare WAF. SSL/TLS and email auth checks still run. Page content checks skipped.
Security Headers
1 passed 5 failed
Fix My Website
HSTS Fail
Skipped — Cloudflare blocked access; headers could not be verified.
X-Content-Type-Options Fail
Skipped — Cloudflare blocked access; headers could not be verified.
X-Frame-Options Fail
Skipped — Cloudflare blocked access; headers could not be verified.
Referrer-Policy Fail
Skipped — Cloudflare blocked access; headers could not be verified.
Permissions-Policy Fail
Skipped — Cloudflare blocked access; headers could not be verified.
Server Information Disclosure Pass
Server and technology headers do not expose version information.
Cookie Security
1 passed
Cookie Security Flags Pass
No cookies were set by this page - no cookie security issues.
Transport Security
1 passed 2 failed
Fix My Website
HTTP → HTTPS Redirect Fail
HTTP requests are not redirected to HTTPS. Visitors on http:// receive an unencrypted connection.
TLS Version Pass
Server enforces TLS 1.2 or higher - deprecated protocol versions are rejected.
Mixed Content Fail
Failed — Cloudflare blocked access; mixed content could not be verified.
Tracking & Analytics
1 failed
Fix My Website
Tracking Scripts Fail
Failed — Cloudflare blocked access; tracking scripts could not be verified.
Contact Email Quality
1 failed
Fix My Website
Contact Email Addresses Fail
Failed — Cloudflare blocked access; email addresses could not be verified.
Health Data Safety
3 failed
Fix My Website
HTTPS Enforcement Fail
Failed — Cloudflare blocked access; health data safety could not be verified.
Health Form Fields Fail
Failed — Cloudflare blocked access; health data safety could not be verified.
Third-Party Tracker Exposure Fail
Failed — Cloudflare blocked access; health data safety could not be verified.
Privacy & Legal
10 failed
Fix My Website
Privacy Policy Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Notice of Privacy Practices Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Terms of Service Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
HIPAA Notice Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Cookie Policy Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Accessibility Statement Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Non-Discrimination Policy Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
State Privacy Rights Notice Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Form Service Compliance Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Chat Widget Risk Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Resource Integrity
1 failed
Fix My Website
Subresource Integrity (SRI) Fail
Failed — Cloudflare blocked access; SRI could not be verified.
Email Authentication
1 warning 2 failed
Fix My Website
SPF Record Fail
No SPF record found. Add TXT record: v=spf1 include:_spf.google.com ~all
DMARC Record Fail
No DMARC record. Add TXT record at _dmarc.martellchiro.com: v=DMARC1; p=quarantine; rua=mailto:[email protected]
DKIM Record Warning
No DKIM record found on common selectors. Your mail provider may use a custom selector.
✨

Get an AI summary of this report

Open a new chat with your report pre-loaded

ChatGPT Claude Gemini
26 Recommendations
1
HSTS: Skipped — Cloudflare blocked access; headers could not be verified.
2
X-Content-Type-Options: Skipped — Cloudflare blocked access; headers could not be verified.
3
X-Frame-Options: Skipped — Cloudflare blocked access; headers could not be verified.
4
Referrer-Policy: Skipped — Cloudflare blocked access; headers could not be verified.
5
Permissions-Policy: Skipped — Cloudflare blocked access; headers could not be verified.
6
HTTP → HTTPS Redirect: HTTP requests are not redirected to HTTPS. Visitors on http:// receive an unencrypted connection.
7
Mixed Content: Failed — Cloudflare blocked access; mixed content could not be verified.
8
Tracking Scripts: Failed — Cloudflare blocked access; tracking scripts could not be verified.
9
Contact Email Addresses: Failed — Cloudflare blocked access; email addresses could not be verified.
10
HTTPS Enforcement: Failed — Cloudflare blocked access; health data safety could not be verified.
11
Health Form Fields: Failed — Cloudflare blocked access; health data safety could not be verified.
12
Third-Party Tracker Exposure: Failed — Cloudflare blocked access; health data safety could not be verified.
13
Privacy Policy: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
14
Notice of Privacy Practices: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
15
Terms of Service: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
16
HIPAA Notice: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
17
Cookie Policy: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
18
Accessibility Statement: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
19
Non-Discrimination Policy: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
20
State Privacy Rights Notice: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
21
Form Service Compliance: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
22
Chat Widget Risk: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
23
Subresource Integrity (SRI): Failed — Cloudflare blocked access; SRI could not be verified.
24
SPF Record: No SPF record found. Add TXT record: v=spf1 include:_spf.google.com ~all
25
DMARC Record: No DMARC record. Add TXT record at _dmarc.martellchiro.com: v=DMARC1; p=quarantine; rua=mailto:[email protected]
26
DKIM Record: No DKIM record found on common selectors. Your mail provider may use a custom selector.
Ready to Fix These Issues?
Our specialists can remediate every finding, protect your patients, and keep your website secure.
Fix My Website →