Broid measures the security configuration a site exposes to the internet — HTTPS and transport security, protective headers, exposed files and secrets, database exposure, cookies, and DNS/email protections — mapped to OWASP and CWE standards. It does not measure the size or reputation of the company behind the site.
What this page is and is not. The grade shown is the result of an automated external scan on the date stated, and reflects only what that site exposed publicly at that moment. It is not a certification, accreditation, audit opinion or guarantee, and it is not a penetration test. A good grade means nothing dangerous was exposed publicly when we looked; it does not mean the application is secure, and Broid does not warrant the site or the organisation behind it. This page is published as a factual record of a measurement and should not be relied upon as assurance for procurement, insurance, investment or compliance purposes. Questions or corrections: broid@broid.net.
This page is served live by Broid from our latest scan of the site. The site owner cannot edit the grade — a badge only ever shows what our scanner actually measured.
What we will and won't publish. A grade appears on this page, on a badge or on a shared card only when it is B or better. Broid does not publish a weak result about any site, whoever asked for the scan — a page below that threshold looks exactly like a site we have never scanned, so nobody can use Broid to find out that someone else's site is exposed. If your own site scores below B you still get the complete result, findings and all, in the scan you ran; we simply don't put it anywhere public. See the Terms for the two narrow exceptions: anonymous aggregate statistics, and named commentary on major global platforms whose configuration anyone can inspect.