Tier 2 · scanned 3 hours ago
SeamlessHR
seamlesshr.com · Payroll for your staff
0/1000External
Capped at CMeasured 808, held at C by a critical: “.git folder open to anyone”
Fix requested · 1 finding · due 25 Oct
Waiting on SeamlessHR to fix it
When they mark it fixed in their portal, we rescan straight away. Fixed, they land at B · 808.
The grade
How their 799 is made
External · Fintech weights, as your organisation set · every point accounted for
A critical holds them at C whatever the points say: “.git folder open to anyone” on careers.seamlesshr.com. Fixed, they’re B · 808.
92 points from A. Fixing everything we've listed is worth +30: closer, but not there.
0808 earned · 192 lost1000
- Keeping up to dateSoftware with known holes, versions on show16%120/160Older versions on minor hosts, none critical−40
- DNS and emailSPF, DMARC, DNSSEC, records pointing nowhere10%60/100Small record issues across their domains−40
- EncryptionCertificates, protocols, browser protections14%112/140TLS 1.1 still accepted−8+8 if fixed
- Open doorsAdmin panels, databases and services open to anyone18%158/180Payroll admin login without a second factor−22+22 if fixed
- Breach historyBreaches disclosed in the last five years10%80/100Past breaches, counted for less as they age−20
- IP reputationTheir addresses on spam and malware lists8%60/80Some of their addresses on spam or abuse lists−20
- Hacker chatterMentions where attacks are planned8%60/80Named in passing where attacks are discussed−20
- LeaksStaff logins in breach dumps, files left public16%158/160.git folder open to anyonecaps Clifts the cap