generated: '2026-08-26'
method: probed
source: live DNS/TLS/HTTP probes of apis.yml + OpenAPI hosts
hosts:
- host: nurabio.com
  https: true
  tls_version: TLSv1.3
  cert_expires: Oct 23 23:34:18 2026 GMT
  hsts: false
domains:
- domain: nurabio.com
  dnssec: false
  caa: []
  spf: true
  dmarc: true
  dmarc_policy: reject
note: 'Probed 2026-08-26. Only nurabio.com is scored here. The probe script also walked developer.wordpress.org
  because that is the humanURL of the content API entry (the upstream WordPress REST handbook, since Nura
  Bio publishes no reference of its own); that result was removed because wordpress.org is not a domain Nura
  Bio controls and its posture must not be credited or charged to Nura Bio. Findings: TLS 1.3 is served and
  the certificate is current, SPF and DMARC are both published with a p=reject policy, but HSTS is not set,
  DNSSEC is not enabled, and no CAA record is published. The site is WordPress on Kinsta behind Cloudflare.'