Want a badge like this? Run a free scan in under a minute — claim it with Pro.
Run a free scanStripe
stripe.comScanned Oct 28, 2026
Stripe scored 84/100 (B). 15 passed, 3 warnings, 2 failed. 5 items to fix below. Mix of live fetch + heuristic checks.
Previous 77 → Now 84 (Δ +7)
15
Passed
3
Warnings
2
Failed
Check breakdown
Privacy policy present
A privacy policy link was found on the page.
Matched privacy-related footer/nav link in HTML.
Tracker inventory & data minimization
No major third-party trackers detected in page HTML.
Checked common analytics/ads pixel patterns — none matched.
Form privacy
Forms are served over HTTPS with reasonable privacy attributes.
https=true, passwordField=false, autocompleteAttrs=false
Cookie / consent management
No cookie consent or CMP signals were detected.
No CMP vendor strings or cookie-consent markup found.
Fix: Improve “Cookie / consent management” to raise your Trust Score.
HTTP Strict Transport Security
HSTS is enabled with a strong max-age.
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Content Security Policy
CSP detected but uses overly broad directives (e.g. unsafe-inline).
Content-Security-Policy: base-uri 'none'; child-src 'none'; connect-src https://c.increment.com https://c.stripe.dev https://c.stripe.global https://c.stripe.partners blob: https://b.st…
Fix: Improve “Content Security Policy” to raise your Trust Score.
TLS certificate & HTTPS
Site is served over HTTPS with a reachable TLS endpoint.
Final URL: https://stripe.com/ (HTTP 200)
Mixed content
No obvious mixed-content http:// assets on the HTTPS page.
No http:// script/img src patterns in sample.
Clickjacking protection
X-Frame-Options or frame-ancestors CSP directive is set.
X-Frame-Options: SAMEORIGIN
Referrer-Policy
Referrer-Policy limits sensitive URL leakage.
Referrer-Policy: no-referrer-when-downgrade
Responsible disclosure
security.txt found for responsible disclosure.
Contact: https://hackerone.com/stripe | Expires: 2026-12-31T23:59:00.000Z | Acknowledgments: https://hackerone.com/stripe/thanks
Email authentication (SPF/DMARC)
SPF and DMARC DNS records are present.
SPF: 00D50000000JV6w=1TBTQ0000000CIv;00DDn000000HWol=1TBVY00000002Hx;00D4x000003vxGL= · DMARC: v=DMARC1; p=reject; pct=100; fo=1; rua=mailto:dmarc-reports@stripe.com; ruf=mail
Subresource Integrity
External scripts lack Subresource Integrity (SRI).
88 script src tags, 0 with integrity=
Fix: Improve “Subresource Integrity” to raise your Trust Score.
Malware / phishing reputation
No malware or phishing reputation flags in heuristic checks.
Simulated clean result for stripe.com
Terms of service
No clear terms of service link detected.
No href matching terms/tos/legal found.
Fix: Improve “Terms of service” to raise your Trust Score.
AI-use disclosure
No explicit AI-use disclosure found (optional but increasingly expected).
No AI disclosure/policy phrases in sampled HTML.
Fix: Improve “AI-use disclosure” to raise your Trust Score.
Ecommerce / payment trust signals
Recognized payment / PCI-oriented signals present.
Matched payment/checkout related markup or copy.
Contact & support channels
Clear contact or support channels are available.
Found contact/support link or support-style mailto.
Accessibility fundamentals
Strong accessibility signals: landmarks and/or alt attributes.
main=true, img[alt]=true, skip-link=false
Brand & reputation signals
Canonical and Open Graph tags support consistent brand identity.
canonical=true, openGraph=true
Domain maturity signals
Very new or unusual domain patterns increase impersonation risk.
Simulated finding for domain maturity signals on stripe.com
Fix: Use a consistent brand domain and publish clear company identity.
This score is below 100 because of the issues below. Each item maps to a warning or failed check with evidence in the breakdown.
- 1Improve “Cookie / consent management” to raise your Trust Score.
- 2Use a consistent brand domain and publish clear company identity.
- 3Improve “Content Security Policy” to raise your Trust Score.
- 4Improve “Subresource Integrity” to raise your Trust Score.
- 5Improve “Terms of service” to raise your Trust Score.
<script src="https://trustbadgeai.com/api/embed/stripe.com" async></script>Step-by-step for WordPress, Shopify, Webflow, and more: Install guides
Prefer CMS walkthroughs? Install on WordPress, Shopify, Webflow & more
Free scan + public report anytime. Own, embed, and monitor from $29/mo. How scoring works
Run a free scan