HTTPS enforced with HSTS
We measure this ourselves on their own site. It is the cheapest security control there is.
- 143Published
- 185Vendors measured
- 77%Of those measured
- 2026-08-31Checked
Weight in the overall score: 2. See how we score · back to all criteria.
Published
HTTP redirects to HTTPS and the HSTS header is set.
No enforced HTTPS with HSTS found.
We reached at least one address for each of these vendors and none of them carried it. That is what we found at the addresses we checked, on the date we checked them, and not a statement about what the vendor has.
| Vendor | Category | What we checked |
|---|---|---|
| Around | Video conferencing | 2 addresses checked |
| Basecamp | Project management | 2 addresses checked |
| Campaign Monitor | Email marketing | 2 addresses checked |
| Circula | Expense management | 2 addresses checked |
| CleverReach | Email marketing | 2 addresses checked |
| Close | CRM | 2 addresses checked |
| Concord | Contract management | 2 addresses checked |
| DocSend | E-signature | 2 addresses checked |
| Egnyte | Cloud storage | 2 addresses checked |
| Formbricks | Surveys and forms | 2 addresses checked |
| FreshBooks | Accounting | 2 addresses checked |
| Gorgias | Helpdesk | 2 addresses checked |
| Greenhouse | Applicant tracking | 2 addresses checked |
| HiBob | HR and payroll | 2 addresses checked |
| Insightly | CRM | 2 addresses checked |
| Ironclad | Contract management | 2 addresses checked |
| Jitsi | Video conferencing | 2 addresses checked |
| Jotform | Surveys and forms | 2 addresses checked |
| Juro | Contract management | 2 addresses checked |
| Kayako | Helpdesk | 2 addresses checked |
| Kit | Email marketing | 2 addresses checked |
| Lexware Office | Accounting | 2 addresses checked |
| Mailchimp | Email marketing | 2 addresses checked |
| MailerLite | Email marketing | 2 addresses checked |
| NetSuite | Accounting | 2 addresses checked |
| OneLogin | Password and identity | 2 addresses checked |
| PandaDoc | E-signature | 2 addresses checked |
| Paperform | Surveys and forms | 2 addresses checked |
| pCloud | Cloud storage | 2 addresses checked |
| Personio | HR and payroll | 2 addresses checked |
| Pirsch | Web analytics | 2 addresses checked |
| Plausible | Web analytics | 2 addresses checked |
| Shortcut | Project management | 2 addresses checked |
| Tally | Surveys and forms | 2 addresses checked |
| Tidio | Helpdesk | 2 addresses checked |
| TidyCal | Scheduling | 2 addresses checked |
| Typeform | Surveys and forms | 2 addresses checked |
| Vonage | Video conferencing | 2 addresses checked |
| WorkOS | Password and identity | 2 addresses checked |
| Xero | Accounting | 2 addresses checked |
| Yousign | E-signature | 2 addresses checked |
| Zendesk | Helpdesk | 2 addresses checked |
Not measured
We could not reach these vendors, or their robots.txt asks us not to. This says something about our measurement, not about them. They are left out of the percentage above.
| Vendor | Category | Why not |
|---|---|---|
| Daily | Video conferencing | The plain HTTP endpoint could not be reached, so this was not measured. |
| Height | Project management | The plain HTTP endpoint could not be reached, so this was not measured. |
| Mailjet | Email marketing | This vendor was not measured because our run stopped waiting for it. |
| Ramp | Expense management | The HTTPS endpoint could not be reached, so this was not measured. |
Found something we missed? Tell us and the next run picks it up.