FAULTYPACKET UK SECURITY & COMPLIANCE AUDITOR v1.0

Board & Executive Domain Security Posture Report

Generated on 25 October 2026 • 00:48 BST/GMT • Aligned with UK Cyber Essentials v3.2, NCSC Email Security & Oct 2026 PHP Advisory
PORTFOLIO AVERAGE
49 / 100
5 Domain(s) Audited

faultypacket.co.uk

Mail Gateway: Cloudflare Email Routing • Audited: 2026-10-24 23:48 UTC
GRADE B
65 / 100
Control AreaCompliance StandardStatus & Assessment
DMARC Policy (_dmarc)NCSC / Cyber Essentials v3.2PASS: Enforced (p=reject) + RUA Reporting
v=DMARC1; p=reject; rua=mailto:security@faultypacket.co.uk
SPF Record (v=spf1)RFC 7208 / NCSCWARN: SoftFail (~all) • ~2/10 DNS mechanisms
v=spf1 include:_spf.mx.cloudflare.net ~all
SMTP TLS (MTA-STS / TLS-RPT)RFC 8461 / RFC 8460WARN: Not Configured (_mta-sts missing)   WARN: Not Configured (_smtp._tls missing)
CAA Certificate LockRFC 8659 BaselineWARN: No CAA Record (Any CA can issue certs)
HTTPS & TLS TransportUK GDPR Art. 32PASS: OK (TLSv1.3, HTTP 200)
HSTS HeaderOWASP / NCSC TLSFAIL: MISSING (Vulnerable to SSL Stripping)
CSP / Clickjacking DefenseOWASP ASVSFAIL: MISSING (No CSP or X-Frame-Options)
PHP2Shell Exposure (CVE-2026-109618)Oct 2026 PHP RCE AdvisoryPASS: Hidden (No X-Powered-By header)

Priority Remediation Actions for faultypacket.co.uk:

  • Transition SPF termination from SoftFail (~all) to Strict (-all) once senders are verified.
  • Add Strict-Transport-Security header (max-age=63072000; includeSubDomains; preload).
  • Add Content-Security-Policy (frame-ancestors 'self') and X-Frame-Options: SAMEORIGIN.

jflaw.co.uk

Mail Gateway: Cloud Spam Filter Gateway • Audited: 2026-10-24 23:48 UTC
GRADE B
66 / 100
Control AreaCompliance StandardStatus & Assessment
DMARC Policy (_dmarc)NCSC / Cyber Essentials v3.2PASS: Enforced (p=reject) + RUA Reporting
v=DMARC1; p=reject; rua=mailto:dmarc_agg@vali.email
SPF Record (v=spf1)RFC 7208 / NCSCPASS: Strict HardFail (-all) • ~3/10 DNS mechanisms
v=spf1 ip4:160.153.129.223 ip4:109.68.33.0/24 include:spf.protection.outlook.com include:_spf.google.com include:email.freshdesk.com -all
SMTP TLS (MTA-STS / TLS-RPT)RFC 8461 / RFC 8460WARN: Not Configured (_mta-sts missing)   WARN: Not Configured (_smtp._tls missing)
CAA Certificate LockRFC 8659 BaselineWARN: No CAA Record (Any CA can issue certs)
HTTPS & TLS TransportUK GDPR Art. 32FAIL: <urlopen error _ssl.c:1012: The handshake operation timed ou
HSTS HeaderOWASP / NCSC TLSFAIL: MISSING (Vulnerable to SSL Stripping)
CSP / Clickjacking DefenseOWASP ASVSFAIL: MISSING (No CSP or X-Frame-Options)
PHP2Shell Exposure (CVE-2026-109618)Oct 2026 PHP RCE AdvisoryPASS: Hidden (No X-Powered-By header)

Priority Remediation Actions for jflaw.co.uk:

  • Repair HTTPS/TLS certificate configuration on port 443.
  • Add Strict-Transport-Security header (max-age=63072000; includeSubDomains; preload).
  • Add Content-Security-Policy (frame-ancestors 'self') and X-Frame-Options: SAMEORIGIN.

msbsolicitors.co.uk

Mail Gateway: Hornetsecurity Gateway • Audited: 2026-10-24 23:48 UTC
GRADE C
54 / 100
Control AreaCompliance StandardStatus & Assessment
DMARC Policy (_dmarc)NCSC / Cyber Essentials v3.2PASS: Quarantine Enforced (p=quarantine)
v=DMARC1; p=quarantine; sp=none; pct=100; rua=mailto:a.s6i4nr6o@reports.hornetdmarc.com,mailto:dmarc@mailinblue.com!10m; ruf=mailto:dmarc@mailinblue.com!10m
SPF Record (v=spf1)RFC 7208 / NCSCWARN: SoftFail (~all) • ~6/10 DNS mechanisms
v=spf1 ip4:185.179.20.2 include:ciphr247.com include:spf.sendinblue.com include:spf.hornetsecurity.com include:one.zoho.uk include:spf.protection.outlook.com mx ~all
SMTP TLS (MTA-STS / TLS-RPT)RFC 8461 / RFC 8460WARN: Not Configured (_mta-sts missing)   WARN: Not Configured (_smtp._tls missing)
CAA Certificate LockRFC 8659 BaselineWARN: No CAA Record (Any CA can issue certs)
HTTPS & TLS TransportUK GDPR Art. 32PASS: OK (TLSv1.3, HTTP 200)
HSTS HeaderOWASP / NCSC TLSFAIL: MISSING (Vulnerable to SSL Stripping)
CSP / Clickjacking DefenseOWASP ASVSFAIL: MISSING (No CSP or X-Frame-Options)
PHP2Shell Exposure (CVE-2026-109618)Oct 2026 PHP RCE AdvisoryWARN: Header Exposed: Next.js, Payload

Priority Remediation Actions for msbsolicitors.co.uk:

  • Transition SPF termination from SoftFail (~all) to Strict (-all) once senders are verified.
  • Advance DMARC policy from p=quarantine to p=reject for full anti-spoofing protection.
  • Add Strict-Transport-Security header (max-age=63072000; includeSubDomains; preload).
  • Add Content-Security-Policy (frame-ancestors 'self') and X-Frame-Options: SAMEORIGIN.
  • Suppress X-Powered-By header (expose_php = Off in php.ini).

taxdriven.co.uk

Mail Gateway: Microsoft 365 (Exchange Online) • Audited: 2026-10-24 23:48 UTC
GRADE D
45 / 100
Control AreaCompliance StandardStatus & Assessment
DMARC Policy (_dmarc)NCSC / Cyber Essentials v3.2WARN: Monitoring Only (p=none — Zero Spoof Blocking)
v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com
SPF Record (v=spf1)RFC 7208 / NCSCWARN: SoftFail (~all) • ~2/10 DNS mechanisms
v=spf1 include:spf.mailanyone.net include:spf.protection.outlook.com ~all
SMTP TLS (MTA-STS / TLS-RPT)RFC 8461 / RFC 8460WARN: Not Configured (_mta-sts missing)   WARN: Not Configured (_smtp._tls missing)
CAA Certificate LockRFC 8659 BaselineWARN: No CAA Record (Any CA can issue certs)
HTTPS & TLS TransportUK GDPR Art. 32PASS: OK (TLSv1.3, HTTP 200)
HSTS HeaderOWASP / NCSC TLSFAIL: MISSING (Vulnerable to SSL Stripping)
CSP / Clickjacking DefenseOWASP ASVSFAIL: MISSING (No CSP or X-Frame-Options)
PHP2Shell Exposure (CVE-2026-109618)Oct 2026 PHP RCE AdvisoryPASS: Hidden (No X-Powered-By header)

Priority Remediation Actions for taxdriven.co.uk:

  • Transition SPF termination from SoftFail (~all) to Strict (-all) once senders are verified.
  • DMARC is set to p=none (monitoring only). Attackers can still spoof executive emails.
  • Add Strict-Transport-Security header (max-age=63072000; includeSubDomains; preload).
  • Add Content-Security-Policy (frame-ancestors 'self') and X-Frame-Options: SAMEORIGIN.

watkinsonblack.co.uk

Mail Gateway: No MX Records Found • Audited: 2026-10-24 23:48 UTC
GRADE F
16 / 100
Control AreaCompliance StandardStatus & Assessment
DMARC Policy (_dmarc)NCSC / Cyber Essentials v3.2FAIL: MISSING (No _dmarc TXT Record)
No _dmarc TXT record published
SPF Record (v=spf1)RFC 7208 / NCSCFAIL: MISSING (Direct Domain Spoofing Risk)
No v=spf1 TXT record published
SMTP TLS (MTA-STS / TLS-RPT)RFC 8461 / RFC 8460WARN: Not Configured (_mta-sts missing)   WARN: Not Configured (_smtp._tls missing)
CAA Certificate LockRFC 8659 BaselineWARN: No CAA Record (Any CA can issue certs)
HTTPS & TLS TransportUK GDPR Art. 32PASS: OK (TLSv1.3, HTTP 200)
HSTS HeaderOWASP / NCSC TLSFAIL: MISSING (Vulnerable to SSL Stripping)
CSP / Clickjacking DefenseOWASP ASVSFAIL: MISSING (No CSP or X-Frame-Options)
PHP2Shell Exposure (CVE-2026-109618)Oct 2026 PHP RCE AdvisoryPASS: Hidden (No X-Powered-By header)

Priority Remediation Actions for watkinsonblack.co.uk:

  • Publish a strict SPF TXT record ending with '-all'.
  • Create _dmarc TXT record; roll out p=quarantine -> p=reject with rua aggregate reporting.
  • Add Strict-Transport-Security header (max-age=63072000; includeSubDomains; preload).
  • Add Content-Security-Policy (frame-ancestors 'self') and X-Frame-Options: SAMEORIGIN.
Generated by FaultyPacket UK Domain & PHP2Shell Remediation Pack • https://faultypacket.co.uk • Support: security@faultypacket.co.uk