Host · tessellatepay.com · Production · criticality D
200 · Tessellate Pay status · Vercel · 1 open issue · first seen 2 Sep · last scanned Mon 12 Oct · scanning now, since 10:19
One serious issue open
Without a CSP, one injected script runs with full access to the page. On a checkout or sign-in page that's card or password theft.
What to fix on it first
1 issue · ranked by proof, then exploitation in the wild, then severity
Everything else, worst first · 1
Who gets its findings, and how much it matters
Owner routes findings · criticality moves them up the queue
Owner
Set by hand
What it's for
What customers use
Criticality
Marketing, docs and help: nothing secret behind them
What answers, from where, running what
As the last finished scan saw it
On the web
How it meets the internet
On someone else's platform
Vercel, Heroku, WP Engine and the like run it. They patch the server; you own the name.
Runs
Connected to
What it offers anyone who asks
Open ports, the headers its pages send, the routes we know
Ports
None open beyond the web.
Headers