Openai

Privacy policy present

A privacy policy link was found on the page.

Matched privacy-related footer/nav link in HTML.

Tracker inventory & data minimization

No major third-party trackers detected in page HTML.

Checked common analytics/ads pixel patterns — none matched.

Form privacy

Forms are served over HTTPS with reasonable privacy attributes.

https=true, passwordField=false, autocompleteAttrs=true

Cookie / consent management

Consent tooling signals detected on the page.

Matched known CMP / consent script or markup patterns.

HTTP Strict Transport Security

HSTS is enabled with a strong max-age.

Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

Content Security Policy

CSP detected but uses overly broad directives (e.g. unsafe-inline).

Content-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googleadservices.com…

Fix: Improve “Content Security Policy” to raise your Trust Score.

TLS certificate & HTTPS

Site is served over HTTPS with a reachable TLS endpoint.

Final URL: https://openai.com/ (HTTP 200)

Mixed content

No obvious mixed-content http:// assets on the HTTPS page.

No http:// script/img src patterns in sample.

Clickjacking protection

X-Frame-Options or frame-ancestors CSP directive is set.

CSP frame-ancestors directive present

Referrer-Policy

No Referrer-Policy header detected.

Referrer-Policy header absent.

Fix: Add Referrer-Policy: strict-origin-when-cross-origin (or stricter).

Responsible disclosure

security.txt found for responsible disclosure.

-----BEGIN PGP SIGNED MESSAGE----- | Hash: SHA512 |

Email authentication (SPF/DMARC)

SPF and DMARC DNS records are present.

SPF: mgverify=22d53df776e7e9198e72a000c4056f5ba1624b8f2a50e3d0f4925fcea15bb5d4 | auto · DMARC: v=DMARC1; p=reject; rua=mailto:tdfyvl0n@ag.dmarcian.com; ruf=mailto:tdfyvl0n@fr.

Subresource Integrity

External scripts lack Subresource Integrity (SRI).

108 script src tags, 0 with integrity=

Fix: Improve “Subresource Integrity” to raise your Trust Score.

Malware / phishing reputation

No malware or phishing reputation flags in heuristic checks.

Simulated clean result for openai.com

Terms of service

Terms of service are linked from the page.

Matched terms/legal link in HTML.

AI-use disclosure

No explicit AI-use disclosure found (optional but increasingly expected).

No AI disclosure/policy phrases in sampled HTML.

Fix: Improve “AI-use disclosure” to raise your Trust Score.

Ecommerce / payment trust signals

No ecommerce checkout signals on this page (fine for non-stores).

No payment processor / checkout patterns detected.

Contact & support channels

Clear contact or support channels are available.

Found contact/support link or support-style mailto.

Accessibility fundamentals

Strong accessibility signals: landmarks and/or alt attributes.

main=true, img[alt]=true, skip-link=true

Brand & reputation signals

Canonical and Open Graph tags support consistent brand identity.

canonical=true, openGraph=true

Domain maturity signals

Very new or unusual domain patterns increase impersonation risk.

Simulated finding for domain maturity signals on openai.com

Fix: Use a consistent brand domain and publish clear company identity.