Sovereign Security: Dashboard

A living, opinionated checklist of transport, email, and web security for this domain. This page is generated periodically by open‑source scanners on my cron box and rebuilt as a static page. A one‑stop view I can check at a glance.

It isn’t meant to be exhaustive or cover every RFC corner case. It highlights:

It was born out of a frustration of having to check 10 different tools for 5 different domains, some of which were too deep. I wanted a dashboard that showed 10 domains at a high level and then allowed digging into raw repots if I want.

Today it covers TLS/transport, email posture, security headers, and Lighthouse top‑line scores. Over time I’ll extend it with basic SEO signals, .well-known checks, DNS hygiene, performance budgets, and user‑respecting choices (no trackers, minimal JS).

All of this is publicly discoverable anyway, so I’d rather publish it myself. For transparency, the raw reports are linked at the bottom.

Transport Security A+

  • ✅ TLS grade A+
  • ✅ TLS 1.3 enabled
  • ✅ TLS 1.2 enabled
  • ✅ No SSLv3/TLS1.0/1.1
  • ✅ No weak ciphers
  • ✅ Perfect Forward Secrecy
  • ✅ HTTP/2
  • ✅ HTTP/3 / QUIC
  • ✅ OCSP stapling

Email Security

  • ✅ SPF v=spf1 -all
  • ✅ DMARC (missing)
  • ✅ MTA-STS
  • ✅ TLS-RPT
  • ✅ BIMI → logo

Web Security Headers

  • ✅ HSTS max-age ≥ 15552000
  • ✅ HSTS includeSubDomains
  • ✅ HSTS preload
  • ✅ Content-Security-Policy
  • ✅ Referrer-Policy
  • ✅ Permissions-Policy
  • ✅ X-Frame-Options
  • ✅ X-Content-Type-Options
  • ✅ Cache-Control

Lighthouse

  • ✅ Performance ≥ 90 (100)
  • ✅ SEO ≥ 90 (100)
  • ✅ Best Practices ≥ 90 (96)
  • ✅ Accessibility ≥ 90 (100)

HTML report · JSON