[
  {
    "provider": "Security Headers",
    "title": "Browser security headers",
    "grade": "A+",
    "host": "e62e4539.developingtoday.pages.dev",
    "measuredAt": "2026-10-12T00:41:27Z",
    "reportUrl": "https://securityheaders.com/?q=https%3A%2F%2Fe62e4539.developingtoday.pages.dev%2F&followRedirects=on",
    "scope": "Redesigned website preview. Browser response-header assessment.",
    "summary": "A+ for the tested preview's browser security headers.",
    "verificationMethod": "Provider report inspected in the browser; the provider's automated API requires a separate subscription.",
    "checks": [
      {
        "label": "Strict-Transport-Security",
        "status": "passed"
      },
      {
        "label": "Content-Security-Policy",
        "status": "passed"
      },
      {
        "label": "X-Content-Type-Options",
        "status": "passed"
      },
      {
        "label": "X-Frame-Options",
        "status": "passed"
      },
      {
        "label": "Referrer-Policy",
        "status": "passed"
      },
      {
        "label": "Permissions-Policy",
        "status": "passed"
      }
    ],
    "findings": [
      "The report also notes a wildcard CORS header on the tested static response. Review individual findings in the provider's report alongside the headline grade."
    ]
  },
  {
    "provider": "Internet.nl",
    "title": "Email standards",
    "host": "developingtoday.net",
    "scope": "Company email domain and its receiving mail infrastructure.",
    "score": 97,
    "measuredAt": "2026-10-12T01:16:00Z",
    "reportUrl": "https://internet.nl/mail/developingtoday.net/2059514/",
    "checks": [
      {
        "id": "mailipv6",
        "status": "passed",
        "label": "IPv6"
      },
      {
        "id": "maildnssec",
        "status": "passed",
        "label": "DNSSEC"
      },
      {
        "id": "mailauth",
        "status": "passed",
        "label": "SPF, DKIM and DMARC"
      },
      {
        "id": "mailtls",
        "status": "failed",
        "label": "STARTTLS and DANE category"
      },
      {
        "id": "mailrpki",
        "status": "passed",
        "label": "RPKI"
      }
    ],
    "findings": [
      "The combined STARTTLS and DANE category retains failures for legacy cipher suites and the key-exchange hash offered by the Microsoft receiving endpoint. DANE record existence, validity and rollover pass; the report also retains a certificate public-key recommendation."
    ],
    "summary": "IPv6, DNSSEC, email authentication and route authorization pass. Transport findings remain visible in the full report."
  },
  {
    "provider": "Internet.nl",
    "title": "Website standards",
    "host": "www.developingtoday.net",
    "scope": "Production website before the redesign goes live. Separate from the redesigned preview above.",
    "score": 95,
    "measuredAt": "2026-10-12T00:41:00Z",
    "reportUrl": "https://internet.nl/site/www.developingtoday.net/4343069/",
    "checks": [
      {
        "id": "siteipv6",
        "status": "passed",
        "label": "IPv6"
      },
      {
        "id": "sitednssec",
        "status": "passed",
        "label": "DNSSEC"
      },
      {
        "id": "sitetls",
        "status": "failed",
        "label": "HTTPS category"
      },
      {
        "id": "siteappsecpriv",
        "status": "warning",
        "label": "Security options"
      },
      {
        "id": "siterpki",
        "status": "passed",
        "label": "RPKI"
      }
    ],
    "findings": [
      "The HTTPS category retains cipher-suite, cipher-order and handshake-hash findings. The report also recommends changes to CSP, security.txt and CAA. These are the production host's results on the stated date."
    ],
    "summary": "IPv6, DNSSEC and route authorization pass. The report retains HTTPS findings and security-option recommendations."
  }
]