Unclassified // For public releaseCompany Forensics · Online Security Checked

Full corporate forensics — registration, ownership, people, and risk — at companyforensics.org.

Automatic security check · Public OSINT only

Company website

https://www.gov.uk/

88%

Strong protections

Public signals look solid. Keep verifying ownership and payment flows for high-stakes use. Passive OSINT only · inventKeys=false.

High concern
Elevated risk
Caution advised
Trusted — verify
Strong protections

gov.uk security check

Name: gov.uk security check — Strong protections | Company Forensics
Item: gov.uk
Rating: 88
Author: Company Forensics

Public OSINT valuation for gov.uk: grade A (88/100). Title signal “Welcome to GOV.UK”. 6 security headers present, 2 commonly expected headers missing. This is a defensive surface review — not a penetration test.

/100

Grade A

Company website · Services · Social

Company website

https://www.gov.uk/

Services & products

Housing and local services https://www.gov.uk/browse/housing-local-services
HMRC services: sign in https://www.gov.uk/log-in-register-hmrc-online-services
Government Digital Service https://www.gov.uk/government/organisations/government-digital-service

Social & LinkedIn

No social or LinkedIn company links found on the scanned pages.

Links are extracted from public crawl HTML only. We never invent profiles or product pages.

Research engines · Complete scan

This complete report delivers web-check-class passive modules to customers — DNS, TLS, headers, mail auth, archives, CT logs and more. Run a live check on the security-check tool for the full interactive dashboard.

Connect this report to your website

Add a free badge that links visitors to this official Company Forensics Online Security Checked report. You get referral traffic and a backlink; customers can verify the dossier.

Open this public report

Badge HTML (copy into your footer or About page)

<!-- Company Forensics Online Security Checked badge -->
<a href="https://companyforensics.org/gov.uk/#security-report" title="Company Forensics Online Security Checked for gov.uk" rel="noopener"><img src="https://companyforensics.org/security-check/assets/official-security-report-seal-v20261103cf.png" alt="Company Forensics Online Security Checked · score 88/100" width="88" height="88" loading="lazy" /></a>

Trustpilot · Glassdoor

Trustpilot

—

Official Trustpilot signals only — never scraped. Shown when a public Business Unit profile exists (inventKeys=false).

Open Trustpilot for gov.uk ↗

Glassdoor

—

No Glassdoor scrape. Search the official employer directory when no linked profile is present.

Search Glassdoor ↗

Hosting · IP · map

IP151.101.64.144
ASN—
Hosting—
Geo—
PTR—
Nameservers—
MX—
SPF—

Map pending — IP geolocation not available (inventKeys=false).

Query
gov.ukRequested hostname
IP
151.101.64.144Resolved A record
ASN
—Hosting org
Trace
ICMP traceroute off by policyPassive IP path only · inventKeys=false

Sources: DNS · MX/SPF/PTR · ipwho.is · OpenStreetMap · hosting-check · tool=vendor.hosting_check (passive only). Soft-fail if geo blocked · inventKeys=false.

Domain registration · business age

Domain age · domain-age-checker · vendor.domain_age

—

RDAP registration age

RegistrarNominet UK

Registered—

Domain age—

Age band—

Registry / location—

Public RDAP / WHOIS only · domain-age-checker · tool=vendor.domain_age. Soft-fail when WHOIS is blocked — we never invent registrar or age.

Website worth · free TLDs · age

StatusNot estimated — need RDAP age

Soft-fail without registration age · tool=vendor.site_worth · inventKeys=false.

Same-name free extensions

gov.io · available
gov.co · available
gov.info · available
gov.xyz · available
gov.site · available
gov.cloud · available
gov.club · available
gov.pro · available

Checked 22 TLDs for “gov” · 8 registered · 1 unknown · DNS + RDAP only · tool=vendor.domain_scanner · inventKeys=false.

Highlights

Positive Highlights

SSL/TLS certificate validates (public handshake succeeded).
Final URL is served over HTTPS.
DNS resolves publicly (A/AAAA or equivalent).
TLS handshake OK (TLSv1.3).
HTTP Strict Transport Security is present.
Content-Security-Policy observed.
DNS resolves publicly (A/AAAA).
security.txt found (coordinated disclosure signal).

Negative Highlights

Security header missing: cross-origin-opener-policy.
Security header missing: cross-origin-resource-policy.

Derived from this scan’s findings, RDAP, TLS, and enrichment only · tools=vendor.site_worth,vendor.domain_age,vendor.hosting_check,vendor.domain_scanner · inventKeys=false.

Review Details

Company Evaluation

Registration data lists registrar “Nominet UK”. Treat WHOIS fields as public OSINT only — not a legal ownership certificate.

Webshop Evaluation

No independent traffic/ranking feed was attached to this report. We do not invent popularity — verify commerce risk via payment provider and customer-review channels.

Technical Evaluation

Transport looks healthy: TLSv1.3 with certificate from GlobalSign nv-sa. One or more browser security headers are missing on the final HTTPS response. That weakens clickjacking/XSS defenses even when the site is otherwise legitimate. Registrar on record: Nominet UK. No automated “low-trust registrar” claim is made without a verified feed.

How we scored gov.uk

Positive signals

TLS handshake OK (TLSv1.3).
HTTP Strict Transport Security is present.
Content-Security-Policy observed.
DNS resolves publicly (A/AAAA).
security.txt found (coordinated disclosure signal).
robots.txt is publicly available.
RDAP domain record available (gov.uk).

Risk signals

No elevated risk signals recorded in this pass.

Findings

TLS handshake OK (TLSv1.3).
HTTP Strict Transport Security is present.
Content-Security-Policy observed.
DNS resolves publicly (A/AAAA).
security.txt found (coordinated disclosure signal).
robots.txt is publicly available.
RDAP domain record available (gov.uk).
Final HTTP status 200 at https://www.gov.uk/.

Technical details

DNS

resolved

A: 151.101.64.144, 151.101.128.144, 151.101.192.144, 151.101.0.144
AAAA: 2a04:4e42:c00::144, 2a04:4e42::144, 2a04:4e42:600::144, 2a04:4e42:800::144, 2a04:4e42:a00::144, 2a04:4e42:200::144, 2a04:4e42:400::144, 2a04:4e42:e00::144
PTR: —
error: —

TLS / certificate

version: TLSv1.3
cipher: TLS_AES_128_GCM_SHA256
issuer: GlobalSign nv-sa
notAfter: Dec 28 22:06:14 2026 GMT
SAN sample: www.gov.uk, *.businesslink.gov.uk, *.direct.gov.uk, *.publishing.service.gov.uk, *.cabinet-office.gov.uk, assets.digital.cabinet-office.gov.uk, service.gov.uk, data.gov.uk
error: —

HTTP & security headers

6 present

finalUrl: https://www.gov.uk/
status: 200
server: nginx
x-powered-by: —
present: content-security-policy, permissions-policy, referrer-policy, strict-transport-security, x-content-type-options, x-frame-options
missing: cross-origin-opener-policy, cross-origin-resource-policy
cookie Secure: False
cookie HttpOnly: False

Tech fingerprint (public)

passive

title: Welcome to GOV.UK
generator: —
tech: —
script hosts: x
description: GOV.UK - The best place to find government services and information.

Company presence (crawl links)

extracted

companyWebsite: https://www.gov.uk/
serviceLinks: Housing and local services: https://www.gov.uk/browse/housing-local-services, HMRC services: sign in: https://www.gov.uk/log-in-register-hmrc-online-services, Government Digital Service: https://www.gov.uk/government/organisations/government-digital-service
socialLinks: none found

RDAP / registration

rdap

domain: gov.uk
registrar: Nominet UK
created: —
expires: —
nameservers: dns1.nic.uk., dns2.nic.uk., dns3.nic.uk., dns4.nic.uk., nsa.nic.uk., nsb.nic.uk., nsc.nic.uk., nsd.nic.uk.
status: server update prohibited, server delete prohibited, server transfer prohibited
error: —

Public well-known

passive

/.well-known/security.txt: HTTP 200 · found
/robots.txt: HTTP 200 · found
/security.txt: HTTP 200 · found

Analyzed 2026-11-09T17:11:17Z CF passive OSINT (DNS/TLS/HTTP/RDAP/well-known) — no exploits More recent checks

looking for more information about this company or any company in the world? -Contact http://companyforensics.org

This service was brought to you by http://dotsynergygroup.com