HIPAA Report

https://optimalhealth-np.com

Oct 9, 2026 RPT-8AB9711F View Site

* Rescans available every 24 hours

HIGH PRIORITY
24 failed · 0 warnings

* We detected the following that may create HIPAA privacy or security risks on your website.

6
Passed
24
Failed
0
Warnings
30
Checks
SSL / TLS
Security Headers
Transport Security
Cookie Security
Tracking Scripts
Contact Emails
Health Data Safety
Privacy & Legal
Resource Integrity
SPF
DMARC
DKIM
24 Recommendations Available
See actionable steps to improve your HIPAA security score.
View Recommendations
Ready to fix these issues? Our specialists can remediate every finding.
Fix My Website →
SSL / TLS
1 failed
Fix My Website
SSL/TLS Certificate Fail
No SSL connection - site may not support HTTPS. ()
Page Fetch Failed
Could Not Fetch Page
Connection error: SSL: no alternative certificate subject name matches target host name 'optimalhealth-np.com' SSL/TLS and email auth checks still run.
Security Headers
1 passed 5 failed
Fix My Website
HSTS Fail
Failed — page could not be fetched; security headers unverifiable.
X-Content-Type-Options Fail
Failed — page could not be fetched; security headers unverifiable.
X-Frame-Options Fail
Failed — page could not be fetched; security headers unverifiable.
Referrer-Policy Fail
Failed — page could not be fetched; security headers unverifiable.
Permissions-Policy Fail
Failed — page could not be fetched; security headers unverifiable.
Server Information Disclosure Pass
Server and technology headers do not expose version information.
Cookie Security
1 passed
Cookie Security Flags Pass
No cookies were set by this page - no cookie security issues.
Transport Security
1 passed 2 failed
Fix My Website
HTTP → HTTPS Redirect Fail
HTTP requests are not redirected to HTTPS. Visitors on http:// receive an unencrypted connection.
TLS Version Pass
Server enforces TLS 1.2 or higher - deprecated protocol versions are rejected.
Mixed Content Fail
Failed — page could not be fetched; mixed content unverifiable.
Tracking & Analytics
1 failed
Fix My Website
Tracking Scripts Fail
Failed — page could not be fetched; tracking scripts unverifiable.
Contact Email Quality
1 failed
Fix My Website
Contact Email Addresses Fail
Failed — page could not be fetched; email addresses unverifiable.
Health Data Safety
3 failed
Fix My Website
HTTPS Enforcement Fail
Failed — page could not be fetched; health data safety unverifiable.
Health Form Fields Fail
Failed — page could not be fetched; health data safety unverifiable.
Third-Party Tracker Exposure Fail
Failed — page could not be fetched; health data safety unverifiable.
Privacy & Legal
10 failed
Fix My Website
Privacy Policy Fail
Failed — page could not be fetched; privacy & legal checks unverifiable.
Notice of Privacy Practices Fail
Failed — page could not be fetched; privacy & legal checks unverifiable.
Terms of Service Fail
Failed — page could not be fetched; privacy & legal checks unverifiable.
HIPAA Notice Fail
Failed — page could not be fetched; privacy & legal checks unverifiable.
Cookie Policy Fail
Failed — page could not be fetched; privacy & legal checks unverifiable.
Accessibility Statement Fail
Failed — page could not be fetched; privacy & legal checks unverifiable.
Non-Discrimination Policy Fail
Failed — page could not be fetched; privacy & legal checks unverifiable.
State Privacy Rights Notice Fail
Failed — page could not be fetched; privacy & legal checks unverifiable.
Form Service Compliance Fail
Failed — page could not be fetched; privacy & legal checks unverifiable.
Chat Widget Risk Fail
Failed — page could not be fetched; privacy & legal checks unverifiable.
Resource Integrity
1 failed
Fix My Website
Subresource Integrity (SRI) Fail
Failed — page could not be fetched; SRI unverifiable.
Email Authentication
3 passed
SPF Record Pass
v=spf1 include:secureserver.net -all
DMARC Record Pass
v=DMARC1; p=quarantine; adkim=r; aspf=r; rua=mailto:[email protected];
DKIM Record Pass
Found on selector 'selector1': v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MaA6jIyGURx390yxJ…
✨

Get an AI summary of this report

Open a new chat with your report pre-loaded

ChatGPT Claude Gemini
24 Recommendations
1
SSL/TLS Certificate: No SSL connection - site may not support HTTPS. ()
2
HSTS: Failed — page could not be fetched; security headers unverifiable.
3
X-Content-Type-Options: Failed — page could not be fetched; security headers unverifiable.
4
X-Frame-Options: Failed — page could not be fetched; security headers unverifiable.
5
Referrer-Policy: Failed — page could not be fetched; security headers unverifiable.
6
Permissions-Policy: Failed — page could not be fetched; security headers unverifiable.
7
HTTP → HTTPS Redirect: HTTP requests are not redirected to HTTPS. Visitors on http:// receive an unencrypted connection.
8
Mixed Content: Failed — page could not be fetched; mixed content unverifiable.
9
Tracking Scripts: Failed — page could not be fetched; tracking scripts unverifiable.
10
Contact Email Addresses: Failed — page could not be fetched; email addresses unverifiable.
11
HTTPS Enforcement: Failed — page could not be fetched; health data safety unverifiable.
12
Health Form Fields: Failed — page could not be fetched; health data safety unverifiable.
13
Third-Party Tracker Exposure: Failed — page could not be fetched; health data safety unverifiable.
14
Privacy Policy: Failed — page could not be fetched; privacy & legal checks unverifiable.
15
Notice of Privacy Practices: Failed — page could not be fetched; privacy & legal checks unverifiable.
16
Terms of Service: Failed — page could not be fetched; privacy & legal checks unverifiable.
17
HIPAA Notice: Failed — page could not be fetched; privacy & legal checks unverifiable.
18
Cookie Policy: Failed — page could not be fetched; privacy & legal checks unverifiable.
19
Accessibility Statement: Failed — page could not be fetched; privacy & legal checks unverifiable.
20
Non-Discrimination Policy: Failed — page could not be fetched; privacy & legal checks unverifiable.
21
State Privacy Rights Notice: Failed — page could not be fetched; privacy & legal checks unverifiable.
22
Form Service Compliance: Failed — page could not be fetched; privacy & legal checks unverifiable.
23
Chat Widget Risk: Failed — page could not be fetched; privacy & legal checks unverifiable.
24
Subresource Integrity (SRI): Failed — page could not be fetched; SRI unverifiable.
Ready to Fix These Issues?
Our specialists can remediate every finding, protect your patients, and keep your website secure.
Fix My Website →