HTTPS and TLS
Certificate, HTTPS and publicly observable TLS configuration issues.
Assessment scope
What TrustNeva checks
The assessment is designed to be non-intrusive and based on publicly observable evidence.
Security headers
We review common HTTP security headers and explain what missing protections may mean.
Publicly exposed files
We look for selected files, metadata and configuration that are publicly accessible without authentication.
CMS and plugin indicators
Where a website publicly exposes technology or version information, it may be used as evidence in the report.
Cookies and privacy signals
We review visible cookie and privacy signals that may warrant further review.
Website structure
Robots.txt, sitemaps and internal public pages can help us understand the scope of the public website.
What we do not do:We do not log in, brute-force credentials, exploit vulnerabilities or test internal/private addresses. External links may be identified, but their destinations are not fetched or tested.