Threat examples and compliance framing adjust per vertical. Re-scanning meritrustcu.org preserves your current scores.
Enter a domain, URL, or email address to generate a compliance report.
Overall Compliance Rating
meritrustcu.org has gaps that may weaken protection of taxpayer data under IRS Pub 4557 and the FTC Safeguards Rule. Prioritize the remediation plan below before relying on this configuration as a defensible posture.
This tool uses a weighted algorithm focused on IRS Pub 4557 and the FTC Safeguards Rule:
-all vs exploitable ~all) and DMARC enforcement including explicit sp=reject subdomain policy and np=reject for non-existent subdomains.mode=enforce (not testing/none), plus TLS-RPT and DNSSEC signals. DNS host, IPv6 dual-stack, and BIMI are shown for guidance and are not primary score drivers.lyncdiscover (Microsoft Lync legacy targets are Info only).Without strict DMARC (p=reject) and SPF (-all), attackers can email clients as your firm:
tax@meritrustcu.org message redirects a client's refund or estimated-payment wire during filing season.Unlock the full report for every control — MTA-STS, TLS-RPT, DNSSEC, HSTS, CSP, clickjacking, CAA, security.txt, and endpoint risk — each with named incidents and remediation steps.
The paid report adds a step-by-step playbook: Have I Been Pwned check (when you audit by email), MFA rollout, password-manager guidance (we suggest Proton Pass), and Microsoft 365 / Google Workspace compromised-credential settings — plus our breach-monitoring guide if exposure is found.
Your infrastructure reveals specific vulnerabilities regarding IRS Pub 4557 and the FTC Safeguards Rule. Unlock the full report to access actionable remediation steps, granular DNS data, and the tools below.
What's included in the full report ($99)
Everything below unlocks immediately after checkout—no separate subscriptions.