Threat examples and compliance framing adjust per vertical. Re-scanning paperlesspost.com preserves your current scores.
Enter a domain, URL, or email address to generate a compliance report.
Overall Compliance Rating
paperlesspost.com has gaps that may weaken protection of confidential public records and resident PII under applicable state law. Prioritize the remediation plan below before relying on this configuration as a defensible posture.
This tool uses a weighted algorithm focused on CISA SLTT cybersecurity guidance:
-all vs exploitable ~all) and DMARC enforcement including explicit sp=reject subdomain policy and np=reject for non-existent subdomains.mode=enforce (not testing/none), plus TLS-RPT and DNSSEC signals. DNS host, IPv6 dual-stack, and BIMI are shown for guidance and are not primary score drivers.lyncdiscover (Microsoft Lync legacy targets are Info only).Without strict DMARC (p=reject) and SPF (-all), attackers can email residents as your agency:
finance@paperlesspost.com vendor-invoice email reroutes a municipal payment to a criminal account.Unlock the full report for every control — MTA-STS, TLS-RPT, DNSSEC, HSTS, CSP, clickjacking, CAA, security.txt, and endpoint risk — each with named incidents and remediation steps.
The paid report adds a step-by-step playbook: Have I Been Pwned check (when you audit by email), MFA rollout, password-manager guidance (we suggest Proton Pass), and Microsoft 365 / Google Workspace compromised-credential settings — plus our breach-monitoring guide if exposure is found.
This summary shows how your public DNS and website settings compare to common CISA SLTT cybersecurity guidance expectations. Unlock the full report for step-by-step remediation guidance, granular DNS data, and the tools below.
What's included in the full report ($99)
Everything below unlocks immediately after checkout—no separate subscriptions.