Fix My Website
HIPAA Report

https://rhmedicine.com

Oct 9, 2026 RPT-46BF8F74 View Site

* Rescans available every 24 hours

HIGH PRIORITY
24 failed · 1 warning

* We detected the following that may create HIPAA privacy or security risks on your website.

5
Passed
24
Failed
1
Warnings
30
Checks
SSL / TLS
Security Headers
Transport Security
Cookie Security
Tracking Scripts
Contact Emails
Health Data Safety
Privacy & Legal
Resource Integrity
SPF
DMARC
DKIM
25 Recommendations Available
See actionable steps to improve your HIPAA security score.
View Recommendations
Ready to fix these issues? Our specialists can remediate every finding.
Fix My Website →
SSL / TLS
1 passed
SSL/TLS Certificate Pass
Valid certificate - expires in 32 days (issued by Google Trust Services)
Cloudflare Bot Protection Detected
Page Blocked by Cloudflare
Cloudflare JS challenge returned - a real browser is required. SSL/TLS and email auth checks still run. Page content checks skipped.
Security Headers
1 warning 5 failed
Fix My Website
HSTS Fail
Skipped — Cloudflare blocked access; headers could not be verified.
X-Content-Type-Options Fail
Skipped — Cloudflare blocked access; headers could not be verified.
X-Frame-Options Fail
Skipped — Cloudflare blocked access; headers could not be verified.
Referrer-Policy Fail
Skipped — Cloudflare blocked access; headers could not be verified.
Permissions-Policy Fail
Skipped — Cloudflare blocked access; headers could not be verified.
Server Information Disclosure Warning
Server headers expose version/technology: cloudflare, MODX Revolution. Remove or redact to avoid leaking infrastructure details.
Cookie Security
1 failed
Fix My Website
Cookie Security Flags Fail
1 cookie(s) missing Secure flag. 1 cookie(s) missing SameSite attribute. Unprotected cookies can be stolen via XSS or network interception - serious risk for patient sessions.
Transport Security
2 passed 1 failed
Fix My Website
HTTP → HTTPS Redirect Pass
HTTP traffic correctly redirects to HTTPS.
TLS Version Pass
Server enforces TLS 1.2 or higher - deprecated protocol versions are rejected.
Mixed Content Fail
Failed — Cloudflare blocked access; mixed content could not be verified.
Tracking & Analytics
1 failed
Fix My Website
Tracking Scripts Fail
Failed — Cloudflare blocked access; tracking scripts could not be verified.
Contact Email Quality
1 failed
Fix My Website
Contact Email Addresses Fail
Failed — Cloudflare blocked access; email addresses could not be verified.
Health Data Safety
3 failed
Fix My Website
HTTPS Enforcement Fail
Failed — Cloudflare blocked access; health data safety could not be verified.
Health Form Fields Fail
Failed — Cloudflare blocked access; health data safety could not be verified.
Third-Party Tracker Exposure Fail
Failed — Cloudflare blocked access; health data safety could not be verified.
Privacy & Legal
10 failed
Fix My Website
Privacy Policy Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Notice of Privacy Practices Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Terms of Service Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
HIPAA Notice Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Cookie Policy Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Accessibility Statement Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Non-Discrimination Policy Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
State Privacy Rights Notice Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Form Service Compliance Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Chat Widget Risk Fail
Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
Resource Integrity
1 failed
Fix My Website
Subresource Integrity (SRI) Fail
Failed — Cloudflare blocked access; SRI could not be verified.
Email Authentication
2 passed 1 failed
Fix My Website
SPF Record Pass
v=spf1 a:dispatch-us.ppe-hosted.com ~all
DMARC Record Fail
No DMARC record. Add TXT record at _dmarc.rhmedicine.com: v=DMARC1; p=quarantine; rua=mailto:[email protected]
DKIM Record Pass
Found on selector 'google': v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcszee9ea0ugk2evgf…
✨

Get an AI summary of this report

Open a new chat with your report pre-loaded

ChatGPT Claude Gemini
25 Recommendations
1
HSTS: Skipped — Cloudflare blocked access; headers could not be verified.
2
X-Content-Type-Options: Skipped — Cloudflare blocked access; headers could not be verified.
3
X-Frame-Options: Skipped — Cloudflare blocked access; headers could not be verified.
4
Referrer-Policy: Skipped — Cloudflare blocked access; headers could not be verified.
5
Permissions-Policy: Skipped — Cloudflare blocked access; headers could not be verified.
6
Server Information Disclosure: Server headers expose version/technology: cloudflare, MODX Revolution. Remove or redact to avoid leaking infrastructure details.
7
Cookie Security Flags: 1 cookie(s) missing Secure flag. 1 cookie(s) missing SameSite attribute. Unprotected cookies can be stolen via XSS or network interception - serious risk for patient sessions.
8
Mixed Content: Failed — Cloudflare blocked access; mixed content could not be verified.
9
Tracking Scripts: Failed — Cloudflare blocked access; tracking scripts could not be verified.
10
Contact Email Addresses: Failed — Cloudflare blocked access; email addresses could not be verified.
11
HTTPS Enforcement: Failed — Cloudflare blocked access; health data safety could not be verified.
12
Health Form Fields: Failed — Cloudflare blocked access; health data safety could not be verified.
13
Third-Party Tracker Exposure: Failed — Cloudflare blocked access; health data safety could not be verified.
14
Privacy Policy: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
15
Notice of Privacy Practices: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
16
Terms of Service: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
17
HIPAA Notice: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
18
Cookie Policy: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
19
Accessibility Statement: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
20
Non-Discrimination Policy: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
21
State Privacy Rights Notice: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
22
Form Service Compliance: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
23
Chat Widget Risk: Failed — Cloudflare blocked access; privacy & legal checks could not be completed.
24
Subresource Integrity (SRI): Failed — Cloudflare blocked access; SRI could not be verified.
25
DMARC Record: No DMARC record. Add TXT record at _dmarc.rhmedicine.com: v=DMARC1; p=quarantine; rua=mailto:[email protected]
Ready to Fix These Issues?
Our specialists can remediate every finding, protect your patients, and keep your website secure.
Fix My Website →