{
  "domain": "github.com",
  "findings": [
    {
      "checkSlug": "spf",
      "data": {
        "mechanisms": [
          "v=spf1",
          "ip4:192.30.252.0/22",
          "include:spf.protection.outlook.com",
          "include:_netblocks.google.com",
          "include:_netblocks2.google.com",
          "include:mail.zendesk.com",
          "include:_spf.salesforce.com",
          "include:servers.mcsv.net",
          "include:mktomail.com",
          "include:sendgrid.net",
          "ip4:62.253.227.114",
          "ip4:166.78.69.169",
          "ip4:166.78.69.170",
          "ip4:166.78.71.131",
          "~all"
        ],
        "record": "v=spf1 ip4:192.30.252.0/22 include:spf.protection.outlook.com include:_netblocks.google.com include:_netblocks2.google.com include:mail.zendesk.com include:_spf.salesforce.com include:servers.mcsv.net include:mktomail.com include:sendgrid.net ip4:62.253.227.114 ip4:166.78.69.169 ip4:166.78.69.170 ip4:166.78.71.131 ~all"
      },
      "fetchedAt": "2026-05-20T13:26:55.448Z",
      "frameworks": ["SOC 2 CC6.7", "ISO 27001 A.8.20", "NIST SC-8"],
      "host": "github.com",
      "recommendations": [
        "Move to -all (hardfail) once your mail flow is confirmed — softfail gives no real protection"
      ],
      "severity": "medium",
      "severityReason": "~all softfail — receivers may still accept",
      "status": "ok",
      "subdomain": ""
    },
    {
      "checkSlug": "dkim",
      "data": {
        "selectors": [
          { "selector": "default", "status": "not_found" },
          {
            "record": "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6T5sl/RwdSqGoYWaWaFbS2UAeyPrEmd0gogocmRfS441qwR8/0KB81Hw89P0l4YiFRrXYk7NVIGfyCRHAYYZUzCkGeOysI2EjgzLFhd/NEsbRzOEc/kWkK/RO6JFq/5lOn6M9AZw/ap9tds4JG9ApgNNdSpPxp9DmvpsOSgNMVflRxQFrk3kdS4RNAPKu/OPoA7dlR/A/pECryjRoYgENtDXzdnK70HgCekems6UDzxDj61cjyoKoXtEMF/QsaHEQ1Gjfv014rDJBsubk/kT5VqHkWHa/ia68Z5r228Ety/wFfQNjXTx/J7KGZ9GkZlKED659eiJcLnWcKDSiQlhwIDAQAB",
            "selector": "google",
            "status": "found"
          },
          { "selector": "k1", "status": "not_found" },
          {
            "record": "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCxZC/z2cK+2s1f/ktzSDSeFzkfIHrjwtGFsfKMAYvKaXjPVNzKykpbXBkX5nB7dVUTFttda7aROr2iSrIseQ27Ui+4rUZVzgFanE8RaXhYM9n5wPKNv8GtLJk7JgcsYZ7ErgID4uW2sEYyV/dnRYw6rDzOaeRKkKELTUfJI5ebLQIDAQAB;",
            "selector": "selector1",
            "status": "found"
          },
          { "selector": "selector2", "status": "not_found" },
          { "selector": "mxvault", "status": "not_found" }
        ]
      },
      "fetchedAt": "2026-05-20T13:26:55.461Z",
      "frameworks": ["SOC 2 CC6.7", "ISO 27001 A.8.24", "NIST SC-8"],
      "host": "github.com",
      "recommendations": [
        "Check the missing selectors in your DNS provider and re-add any removed records"
      ],
      "severity": "low",
      "severityReason": "2/6 DKIM selectors valid",
      "status": "ok",
      "subdomain": ""
    },
    {
      "checkSlug": "dmarc",
      "data": {
        "record": "v=DMARC1; p=quarantine; sp=reject; pct=100; rua=mailto:dmarc@github.com; ruf=mailto:dmarc@github.com; fo=1",
        "tags": {
          "fo": "1",
          "p": "quarantine",
          "pct": "100",
          "rua": "mailto:dmarc@github.com",
          "ruf": "mailto:dmarc@github.com",
          "sp": "reject",
          "v": "DMARC1"
        }
      },
      "fetchedAt": "2026-05-20T13:26:55.446Z",
      "frameworks": ["SOC 2 CC6.7", "ISO 27001 A.5.14", "NIST SC-8"],
      "host": "github.com",
      "recommendations": [
        "Upgrade to p=reject once your SPF and DKIM pass rates are consistently high"
      ],
      "severity": "low",
      "severityReason": "p=quarantine — receivers send to spam",
      "status": "ok",
      "subdomain": ""
    },
    {
      "checkSlug": "dnssec",
      "data": { "adFlag": false, "dnskey": [], "dnssecEnabled": false, "ds": [] },
      "fetchedAt": "2026-05-20T13:26:55.505Z",
      "frameworks": ["SOC 2 CC6.6", "ISO 27001 A.8.20", "NIST SC-20"],
      "host": "github.com",
      "recommendations": [
        "Enable DNSSEC in your DNS provider's control panel and add the resulting DS record at your registrar"
      ],
      "severity": "low",
      "severityReason": "DNSSEC not configured — no DS or DNSKEY records found",
      "status": "ok",
      "subdomain": ""
    },
    {
      "checkSlug": "tls",
      "data": {
        "authorized": true,
        "fingerprint256": "A7:B8:10:34:CD:43:95:51:C5:0A:29:B5:43:55:25:4A:84:94:2A:0A:99:0C:1A:9E:12:85:6C:85:5B:64:B6:5F",
        "issuer": {
          "CN": "Sectigo Public Server Authentication CA DV E36",
          "O": "Sectigo Limited"
        },
        "sans": ["github.com", "www.github.com"],
        "subject": { "CN": "github.com" },
        "validFrom": "May  5 00:00:00 2026 GMT",
        "validTo": "Aug  2 23:59:59 2026 GMT"
      },
      "fetchedAt": "2026-05-20T13:26:55.472Z",
      "frameworks": ["SOC 2 CC6.1", "ISO 27001 A.8.24", "NIST SC-8(1)"],
      "host": "github.com",
      "recommendations": ["Schedule certificate renewal — consider enabling auto-renewal"],
      "severity": "low",
      "severityReason": "cert expires in 74 days",
      "status": "ok",
      "subdomain": ""
    },
    {
      "checkSlug": "cors",
      "data": {
        "anyAcHeader": false,
        "method": "GET",
        "origin": "https://drwho.me",
        "preflightStatus": 404
      },
      "fetchedAt": "2026-05-20T13:26:56.130Z",
      "frameworks": ["SOC 2 CC6.6", "ISO 27001 A.8.23", "NIST AC-4"],
      "host": "github.com",
      "recommendations": [],
      "severity": "info",
      "severityReason": "no CORS headers — cross-origin requests blocked by default",
      "status": "ok",
      "subdomain": ""
    },
    {
      "checkSlug": "ct_log",
      "data": {
        "certCount": 48,
        "source": "certspotter",
        "subdomains": [
          "api.mcp.github.com",
          "api.security.github.com",
          "asset-generator.github.com",
          "awesome-copilot.github.com",
          "bug-bash.github.com",
          "communication.github.com",
          "copilot-billing-preview.github.com",
          "copilot-reports.github.com",
          "ducky.github.com",
          "emails.github.com",
          "examadmin-uat.github.com",
          "examadmin.github.com",
          "examregistration-api.github.com",
          "examregistration-uat-api.github.com",
          "f.cloud.github.com",
          "gameoff.github.com",
          "garage.github.com",
          "gist.github.com",
          "import2.github.com",
          "importer2.github.com",
          "livesend.github.com",
          "m.communication.github.com",
          "mailing.github.com",
          "model-launchkit.github.com",
          "octocaptcha.review-lab.github.com",
          "pkg.github.com",
          "porter2.github.com",
          "proxima-review-lab.github.com",
          "registry.github.com",
          "res.communication.github.com",
          "review-lab.github.com",
          "smtp.github.com",
          "support.enterprise.github.com",
          "t.communication.github.com",
          "vpn-ca.iad.github.com",
          "ws.support.github.com",
          "www.communication.github.com",
          "www.github.com"
        ],
        "wildcards": [
          "*.examadmin-uat.github.com",
          "*.examadmin.github.com",
          "*.examregistration-api.github.com",
          "*.examregistration-uat-api.github.com",
          "*.github.com",
          "*.octocaptcha.review-lab.github.com",
          "*.pkg.github.com",
          "*.proxima-review-lab.github.com",
          "*.registry.github.com",
          "*.review-lab.github.com",
          "*.smtp.github.com"
        ]
      },
      "fetchedAt": "2026-05-20T13:27:06.341Z",
      "frameworks": ["SOC 2 CC7.2", "ISO 27001 A.8.16", "NIST SI-4"],
      "host": "github.com",
      "recommendations": [],
      "severity": "info",
      "severityReason": "38 subdomain(s) found in CT logs (11 wildcard cert(s))",
      "status": "ok",
      "subdomain": ""
    },
    {
      "checkSlug": "dns",
      "data": {
        "records": {
          "A": [{ "TTL": 21, "data": "20.207.73.82", "name": "github.com", "type": 1 }],
          "AAAA": [],
          "CAA": [
            {
              "TTL": 3600,
              "data": "\\# 19 00 05 69 73 73 75 65 64 69 67 69 63 65 72 74 2e 63 6f 6d",
              "name": "github.com",
              "type": 257
            },
            {
              "TTL": 3600,
              "data": "\\# 21 00 05 69 73 73 75 65 67 6c 6f 62 61 6c 73 69 67 6e 2e 63 6f 6d",
              "name": "github.com",
              "type": 257
            },
            {
              "TTL": 3600,
              "data": "\\# 22 00 05 69 73 73 75 65 6c 65 74 73 65 6e 63 72 79 70 74 2e 6f 72 67",
              "name": "github.com",
              "type": 257
            },
            {
              "TTL": 3600,
              "data": "\\# 18 00 05 69 73 73 75 65 73 65 63 74 69 67 6f 2e 63 6f 6d",
              "name": "github.com",
              "type": 257
            },
            {
              "TTL": 3600,
              "data": "\\# 23 00 09 69 73 73 75 65 77 69 6c 64 64 69 67 69 63 65 72 74 2e 63 6f 6d",
              "name": "github.com",
              "type": 257
            },
            {
              "TTL": 3600,
              "data": "\\# 26 00 09 69 73 73 75 65 77 69 6c 64 6c 65 74 73 65 6e 63 72 79 70 74 2e 6f 72 67",
              "name": "github.com",
              "type": 257
            },
            {
              "TTL": 3600,
              "data": "\\# 22 00 09 69 73 73 75 65 77 69 6c 64 73 65 63 74 69 67 6f 2e 63 6f 6d",
              "name": "github.com",
              "type": 257
            }
          ],
          "NS": [
            { "TTL": 102, "data": "dns1.p08.nsone.net.", "name": "github.com", "type": 2 },
            { "TTL": 102, "data": "dns2.p08.nsone.net.", "name": "github.com", "type": 2 },
            { "TTL": 102, "data": "dns3.p08.nsone.net.", "name": "github.com", "type": 2 },
            { "TTL": 102, "data": "dns4.p08.nsone.net.", "name": "github.com", "type": 2 },
            { "TTL": 102, "data": "ns-1283.awsdns-32.org.", "name": "github.com", "type": 2 },
            { "TTL": 102, "data": "ns-1707.awsdns-21.co.uk.", "name": "github.com", "type": 2 },
            { "TTL": 102, "data": "ns-421.awsdns-52.com.", "name": "github.com", "type": 2 },
            { "TTL": 102, "data": "ns-520.awsdns-01.net.", "name": "github.com", "type": 2 }
          ],
          "SOA": [
            {
              "TTL": 900,
              "data": "ns-1707.awsdns-21.co.uk. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400",
              "name": "github.com",
              "type": 6
            }
          ],
          "TXT": [
            {
              "TTL": 227,
              "data": "\"00Dd0000000hHE0=1TBKg000000TN2r\"",
              "name": "github.com",
              "type": 16
            },
            {
              "TTL": 227,
              "data": "\"MS=6BF03E6AF5CB689E315FB6199603BABF2C88D805\"",
              "name": "github.com",
              "type": 16
            },
            { "TTL": 227, "data": "\"MS=ms44452932\"", "name": "github.com", "type": 16 },
            { "TTL": 227, "data": "\"MS=ms58704441\"", "name": "github.com", "type": 16 },
            {
              "TTL": 227,
              "data": "\"TAILSCALE-xOzoDvFUzZr5YYVCQFuD\"",
              "name": "github.com",
              "type": 16
            },
            {
              "TTL": 227,
              "data": "\"adobe-idp-site-verification=b92c9e999aef825edc36e0a3d847d2dbad5b2fc0e05c79ddd7a16139b48ecf4b\"",
              "name": "github.com",
              "type": 16
            },
            {
              "TTL": 227,
              "data": "\"apple-domain-verification=RyQhdzTl6Z6x8ZP4\"",
              "name": "github.com",
              "type": 16
            },
            {
              "TTL": 227,
              "data": "\"atlassian-domain-verification=jjgw98AKv2aeoYFxiL/VFaoyPkn3undEssTRuMg6C/3Fp/iqhkV4HVV7WjYlVeF8\"",
              "name": "github.com",
              "type": 16
            },
            {
              "TTL": 227,
              "data": "\"calendly-site-verification=at0DQARi7IZvJtXQAWhMqpmIzpvoBNF7aam5VKKxP\"",
              "name": "github.com",
              "type": 16
            },
            {
              "TTL": 227,
              "data": "\"docusign=087098e3-3d46-47b7-9b4e-8a23028154cd\"",
              "name": "github.com",
              "type": 16
            },
            {
              "TTL": 227,
              "data": "\"facebook-domain-verification=39xu4jzl7roi7x0n93ldkxjiaarx50\"",
              "name": "github.com",
              "type": 16
            },
            {
              "TTL": 227,
              "data": "\"google-site-verification=82Le34Flgtd15ojYhHlGF_6g72muSjamlMVThBOJpks\"",
              "name": "github.com",
              "type": 16
            },
            {
              "TTL": 227,
              "data": "\"google-site-verification=UTM-3akMgubp6tQtgEuAkYNYLyYAvpTnnSrDMWoDR3o\"",
              "name": "github.com",
              "type": 16
            },
            {
              "TTL": 227,
              "data": "\"jamf-site-verification=XtaPNIYghF_e_xRDI8CjgQ\"",
              "name": "github.com",
              "type": 16
            },
            {
              "TTL": 227,
              "data": "\"krisp-domain-verification=ZlyiK7XLhnaoUQb2hpak1PLY7dFkl1WE\"",
              "name": "github.com",
              "type": 16
            },
            {
              "TTL": 227,
              "data": "\"loom-site-verification=f3787154f1154b7880e720a511ea664d\"",
              "name": "github.com",
              "type": 16
            },
            {
              "TTL": 227,
              "data": "\"miro-verification=d2e174fdb00c71e0bcf58f8e58c3da2dd80dcfa9\"",
              "name": "github.com",
              "type": 16
            },
            {
              "TTL": 227,
              "data": "\"shopify-verification-code=t1YPwcmvnxZyBycaCpk1MPyWoFs72o\"",
              "name": "github.com",
              "type": 16
            },
            {
              "TTL": 227,
              "data": "\"stripe-verification=f88ef17321660a01bab1660454192e014defa29ba7b8de9633c69d6b4912217f\"",
              "name": "github.com",
              "type": 16
            },
            {
              "TTL": 227,
              "data": "\"v=spf1 ip4:192.30.252.0/22 include:spf.protection.outlook.com include:_netblocks.google.com include:_netblocks2.google.com include:mail.zendesk.com include:_spf.salesforce.com include:servers.mcsv.net include:mktomail.com include:sendgrid.net ip4:62.253.2\" \"27.114 ip4:166.78.69.169 ip4:166.78.69.170 ip4:166.78.71.131 ~all\"",
              "name": "github.com",
              "type": 16
            }
          ]
        }
      },
      "fetchedAt": "2026-05-20T13:26:55.463Z",
      "frameworks": ["SOC 2 CC6.6", "ISO 27001 A.8.20", "NIST SC-20"],
      "host": "github.com",
      "recommendations": [],
      "severity": "info",
      "severityReason": "A/AAAA records present",
      "status": "ok",
      "subdomain": ""
    },
    {
      "checkSlug": "headers",
      "data": {
        "finalUrl": "https://github.com/",
        "headers": {
          "accept-ranges": "bytes",
          "cache-control": "max-age=0, private, must-revalidate",
          "content-encoding": "gzip",
          "content-language": "en-US",
          "content-security-policy": "default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com github.githubassets.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net productionresultssa1.blob.core.windows.net productionresultssa2.blob.core.windows.net productionresultssa3.blob.core.windows.net productionresultssa4.blob.core.windows.net productionresultssa5.blob.core.windows.net productionresultssa6.blob.core.windows.net productionresultssa7.blob.core.windows.net productionresultssa8.blob.core.windows.net productionresultssa9.blob.core.windows.net productionresultssa10.blob.core.windows.net productionresultssa11.blob.core.windows.net productionresultssa12.blob.core.windows.net productionresultssa13.blob.core.windows.net productionresultssa14.blob.core.windows.net productionresultssa15.blob.core.windows.net productionresultssa16.blob.core.windows.net productionresultssa17.blob.core.windows.net productionresultssa18.blob.core.windows.net productionresultssa19.blob.core.windows.net github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com wss://alive-staging.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com edge.fullstory.com rs.fullstory.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com www.youtube-nocookie.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com release-assets.githubusercontent.com secured-user-images.githubusercontent.com user-images.githubusercontent.com private-user-images.githubusercontent.com opengraph.githubassets.com marketplace-screenshots.githubusercontent.com copilotprodattachments.blob.core.windows.net/github-production-copilot-attachments/ github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com explore-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com images.ctfassets.net/8aevphvgewt8/; manifest-src 'self'; media-src github.com user-images.githubusercontent.com secured-user-images.githubusercontent.com private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com github.githubassets.com assets.ctfassets.net/8aevphvgewt8/ videos.ctfassets.net/8aevphvgewt8/; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/",
          "content-type": "text/html; charset=utf-8",
          "date": "Wed, 20 May 2026 13:26:50 GMT",
          "etag": "W/\"3a0d9c22a3c2d9f173556f2f8f1442ff\"",
          "referrer-policy": "origin-when-cross-origin, strict-origin-when-cross-origin",
          "server": "github.com",
          "set-cookie": "logged_in=no; expires=Thu, 20 May 2027 13:26:55 GMT; domain=.github.com; path=/; HttpOnly; secure; SameSite=Lax",
          "strict-transport-security": "max-age=31536000; includeSubdomains; preload",
          "transfer-encoding": "chunked",
          "vary": "X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, X-Requested-With, Accept-Language, Sec-Fetch-Site,Accept-Encoding, Accept, X-Requested-With",
          "x-content-type-options": "nosniff",
          "x-frame-options": "deny",
          "x-github-request-id": "EEFD:220608:1102304:12A4E1C:6A0DB69F",
          "x-xss-protection": "0"
        }
      },
      "fetchedAt": "2026-05-20T13:26:55.483Z",
      "frameworks": ["SOC 2 CC6.6", "ISO 27001 A.8.23", "NIST SC-7(8)"],
      "host": "github.com",
      "recommendations": ["Add permissions-policy response header"],
      "severity": "info",
      "severityReason": "1 security header(s) missing",
      "status": "ok",
      "subdomain": ""
    },
    {
      "checkSlug": "mta_sts",
      "data": null,
      "fetchedAt": "2026-05-20T13:26:55.358Z",
      "frameworks": ["SOC 2 CC6.7", "ISO 27001 A.8.24", "NIST SC-8"],
      "host": "github.com",
      "recommendations": [],
      "severity": "info",
      "severityReason": "not applicable: no _mta-sts TXT record",
      "status": "not_applicable",
      "subdomain": ""
    },
    {
      "checkSlug": "mx",
      "data": {
        "records": [{ "exchange": "github-com.mail.protection.outlook.com.", "priority": 0 }]
      },
      "fetchedAt": "2026-05-20T13:26:55.446Z",
      "frameworks": ["SOC 2 CC6.7", "ISO 27001 A.8.21", "NIST SC-8"],
      "host": "github.com",
      "recommendations": [],
      "severity": "info",
      "severityReason": "1 MX record(s) present",
      "status": "ok",
      "subdomain": ""
    },
    {
      "checkSlug": "redirects",
      "data": { "finalStatus": 200, "hops": [{ "status": 200, "url": "https://github.com/" }] },
      "fetchedAt": "2026-05-20T13:26:55.483Z",
      "frameworks": ["SOC 2 CC6.6", "ISO 27001 A.8.23", "NIST SC-7"],
      "host": "github.com",
      "recommendations": [],
      "severity": "info",
      "severityReason": "HTTPS served correctly",
      "status": "ok",
      "subdomain": ""
    },
    {
      "checkSlug": "tlsrpt",
      "data": null,
      "fetchedAt": "2026-05-20T13:26:55.358Z",
      "frameworks": ["SOC 2 CC7.2", "ISO 27001 A.8.16", "NIST AU-6"],
      "host": "github.com",
      "recommendations": [],
      "severity": "info",
      "severityReason": "not applicable: no TLSRPT record",
      "status": "not_applicable",
      "subdomain": ""
    },
    {
      "checkSlug": "web-surface",
      "data": {
        "head": {
          "description": "Join the world&#39;s most widely adopted, AI-powered developer platform where millions of developers, businesses, and the largest open source community build software that advances humanity.",
          "og": {
            "og:description": "Join the world&#39;s most widely adopted, AI-powered developer platform where millions of developers, businesses, and the largest open source community build software that advances humanity.",
            "og:image": "https://images.ctfassets.net/8aevphvgewt8/4pe4eOtUJ0ARpZRE4fNekf/f52b1f9c52f059a33170229883731ed0/GH-Homepage-Universe-img.png",
            "og:image:alt": "Join the world&#39;s most widely adopted, AI-powered developer platform where millions of developers, businesses, and the largest open source community build software that advances humanity.",
            "og:site_name": "GitHub",
            "og:title": "GitHub · Change is constant. GitHub keeps you ahead.",
            "og:type": "object",
            "og:url": "https://github.com/"
          },
          "title": "GitHub · Change is constant. GitHub keeps you ahead. · GitHub",
          "twitter": {
            "twitter:card": "summary_large_image",
            "twitter:description": "Join the world&#39;s most widely adopted, AI-powered developer platform where millions of developers, businesses, and the largest open source community build software that advances humanity.",
            "twitter:image": "https://images.ctfassets.net/8aevphvgewt8/4pe4eOtUJ0ARpZRE4fNekf/f52b1f9c52f059a33170229883731ed0/GH-Homepage-Universe-img.png",
            "twitter:site": "@github",
            "twitter:title": "GitHub · Change is constant. GitHub keeps you ahead."
          }
        },
        "robots": {
          "body": "# If you would like to crawl GitHub contact us via https://support.github.com?tags=dotcom-robots\n# We also provide an extensive API: https://docs.github.com\nUser-agent: bingbot\nDisallow: /ekansa/Open-Context-Data\nDisallow: /ekansa/opencontext-*\nDisallow: /account-login\nDisallow: */tarball/\nDisallow: */zipball/\nDisallow: /Explodingstuff/\nDisallow: /copilot/\nDisallow: /copilot/c/\n\nUser-agent: adidxbot\nDisallow: /ekansa/Open-Context-Data\nDisallow: /ekansa/opencontext-*\nDisallow: /account-login\nDisallow: */tarball/\nDisallow: */zipball/\nDisallow: /Explodingstuff/\nDisallow: /copilot/\nDisallow: /copilot/c/\n\nUser-agent: BingPreview\nDisallow: /ekansa/Open-Context-Data\nDisallow: /ekansa/opencontext-*\nDisallow: /account-login\nDisallow: */tarball/\nDisallow: */zipball/\nDisallow: /Explodingstuff/\nDisallow: /copilot/\nDisallow: /copilot/c/\n\nUser-agent: baidu\ncrawl-delay: 1\n\n\nUser-agent: *\n\nDisallow: /*/*/pulse\nDisallow: /*/*/projects\nDisallow: /*/*/forks\nDisallow: /*/*/issues/new\nDisallow: /*/*/milestones/new\nDisallow: /*/*/issues/search\nDisallow: /*/*/commits/\nDisallow: /*/*/branches\nDisallow: /*/*/contributors\nDisallow: /*/*/tags\nDisallow: /*/*/stargazers\nDisallow: /*/*/watchers\nDisallow: /*/*/network\nDisallow: /*/*/graphs\nDisallow: /*/*/compare\n\nDisallow: /*/tree/\nDisallow: /gist/\nDisallow: /*/download\nDisallow: /*/revisions\nDisallow: /*/commits/*?author\nDisallow: /*/commits/*?path\nDisallow: /*/comments\nDisallow: /*/archive/\nDisallow: /*/blame/\nDisallow: /*/raw/\nDisallow: /*/cache/\nDisallow: /.git/\nDisallow: */.git/\nDisallow: /*.git$\nDisallow: /search/advanced\nDisallow: /search$\nDisallow: /*q=\nDisallow: /*.atom$\n\nDisallow: /ekansa/Open-Context-Data\nDisallow: /ekansa/opencontext-*\nDisallow: */tarball/\nDisallow: */zipball/\n\nDisallow: /*source=*\nDisallow: /*ref_cta=*\nDisallow: /*plan=*\nDisallow: /*return_to=*\nDisallow: /*ref_loc=*\nDisallow: /*setup_organization=*\nDisallow: /*source_repo=*\nDisallow: /*ref_page=*\nDisallow: /*source=*\nDisallow: /*referrer=*\nDisallow: /*report=*\nDisallow: /*author=*\nDisallow: /*since=*\nDisallow: /*until=*\nDisallow: /*commits?author=*\nDisallow: /*report-abuse?report=*\nDisallow: /*tab=*\nAllow: /*?tab=achievements&achievement=*\n\nDisallow: /account-login\nDisallow: /Explodingstuff/\n\nDisallow: /copilot/\nDisallow: /copilot/c/\n\n",
          "present": true
        },
        "sitemap": { "present": false }
      },
      "fetchedAt": "2026-05-20T13:26:55.741Z",
      "frameworks": ["SOC 2 CC6.6", "ISO 27001 A.8.9", "NIST CM-7"],
      "host": "github.com",
      "recommendations": [],
      "severity": "info",
      "severityReason": "HTTPS surface reachable (robots ✓, sitemap ✗, title ✓)",
      "status": "ok",
      "subdomain": ""
    },
    {
      "checkSlug": "whois",
      "data": {
        "createdAt": "2007-10-09T18:20:50Z",
        "expiresAt": "2026-10-09T18:20:50Z",
        "raw": {
          ">>> Last update of whois database": "2026-05-20T13:26:38Z <<<",
          "Created Date": "2007-10-09T18:20:50Z",
          "DNSSEC": "unsigned",
          "Domain Name": "GITHUB.COM",
          "Domain Status": [
            "clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited",
            "clientTransferProhibited https://icann.org/epp#clientTransferProhibited",
            "clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited"
          ],
          "Expiry Date": "2026-10-09T18:20:50Z",
          "Name Server": [
            "DNS1.P08.NSONE.NET",
            "DNS2.P08.NSONE.NET",
            "DNS3.P08.NSONE.NET",
            "DNS4.P08.NSONE.NET",
            "NS-1283.AWSDNS-32.ORG",
            "NS-1707.AWSDNS-21.CO.UK",
            "NS-421.AWSDNS-52.COM",
            "NS-520.AWSDNS-01.NET"
          ],
          "Registrar": "MarkMonitor Inc.",
          "Registrar Abuse Contact Email": "abusecomplaints@markmonitor.com",
          "Registrar Abuse Contact Phone": "+1.2086851750",
          "Registrar IANA ID": "292",
          "Registrar URL": "http://www.markmonitor.com",
          "Registrar WHOIS Server": "whois.markmonitor.com",
          "Registry Domain ID": "1264983250_DOMAIN_COM-VRSN",
          "URL of the ICANN Whois Inaccuracy Complaint Form": "https://www.icann.org/wicf/",
          "Updated Date": "2024-09-07T09:16:32Z",
          "text": [
            "For more information on Whois status codes, please visit https://icann.org/epp",
            "",
            "NOTICE: The expiration date displayed in this record is the date the",
            "registrar's sponsorship of the domain name registration in the registry is",
            "currently set to expire. This date does not necessarily reflect the expiration",
            "date of the domain name registrant's agreement with the sponsoring",
            "registrar.  Users may consult the sponsoring registrar's Whois database to",
            "view the registrar's reported date of expiration for this registration.",
            "",
            "TERMS OF USE: You are not authorized to access or query our Whois",
            "database through the use of electronic processes that are high-volume and",
            "automated except as reasonably necessary to register domain names or",
            "modify existing registrations; the Data in VeriSign Global Registry",
            "Services' (\"VeriSign\") Whois database is provided by VeriSign for",
            "information purposes only, and to assist persons in obtaining information",
            "about or related to a domain name registration record. VeriSign does not",
            "guarantee its accuracy. By submitting a Whois query, you agree to abide",
            "by the following terms of use: You agree that you may use this Data only",
            "for lawful purposes and that under no circumstances will you use this Data",
            "to: (1) allow, enable, or otherwise support the transmission of mass",
            "unsolicited, commercial advertising or solicitations via e-mail, telephone,",
            "or facsimile; or (2) enable high volume, automated, electronic processes",
            "that apply to VeriSign (or its computer systems). The compilation,",
            "repackaging, dissemination or other use of this Data is expressly",
            "prohibited without the prior written consent of VeriSign. You agree not to",
            "use electronic processes that are automated and high-volume to access or",
            "query the Whois database except as reasonably necessary to register",
            "domain names or modify existing registrations. VeriSign reserves the right",
            "to restrict your access to the Whois database in its sole discretion to ensure",
            "operational stability.  VeriSign may restrict or terminate your access to the",
            "Whois database for failure to abide by these terms of use. VeriSign",
            "reserves the right to modify these terms at any time.",
            "",
            "The Registry database contains ONLY .COM, .NET, .EDU domains and",
            "Registrars."
          ]
        },
        "registrar": "MarkMonitor Inc.",
        "statuses": [
          "clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited",
          "clientTransferProhibited https://icann.org/epp#clientTransferProhibited",
          "clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited"
        ]
      },
      "fetchedAt": "2026-05-20T13:26:56.732Z",
      "frameworks": ["SOC 2 CC2.3", "ISO 27001 A.5.20", "NIST PE-2"],
      "host": "github.com",
      "recommendations": [],
      "severity": "info",
      "severityReason": "domain registered until 2026-10-09",
      "status": "ok",
      "subdomain": ""
    }
  ],
  "scanJobId": "local-github.com-2026-05-20T13:26:55.358Z",
  "scannedAt": "2026-05-20T13:26:55.358Z",
  "summary": {
    "bySeverity": { "critical": 0, "high": 0, "info": 10, "low": 4, "medium": 1 },
    "totalFindings": 15,
    "totalHosts": 1
  },
  "version": "1"
}
