Epic Games
epicgames.com
79%
Security Score
Last scanned Aug 27, 2026
5
Failed
19
Passed
24
Total Checks
Security Checks (24)
Name
Category
Priority
Status
Content Security Policy (CSP)
Headers
Critical
Failed
Content Security Policy (CSP)
HeadersCritical
HSTS enabled
Headers
Critical
Failed
HSTS enabled
HeadersCritical
HTTPS enabled
TLS
Critical
Passed
HTTPS enabled
TLSCritical
TLS Version
TLS
Critical
Passed
TLS Version
TLSCritical
Deprecated TLS versions
TLS
Critical
Passed
Deprecated TLS versions
TLSCritical
HTTP to HTTPS Redirect
TLS
High
Failed
HTTP to HTTPS Redirect
TLSHigh
Frame Security Policy
Headers
High
Passed
Frame Security Policy
HeadersHigh
Set-Cookie headers
Headers
High
Passed
Set-Cookie headers
HeadersHigh
Certificate Expiry
TLS
High
Passed
Certificate Expiry
TLSHigh
Mixed Content
TLS
High
Passed
Mixed Content
TLSHigh
Trusted Types readiness
Headers
Medium
Failed
Trusted Types readiness
HeadersMedium
Directory Listing Detection
Content
Medium
Passed
Directory Listing Detection
ContentMedium
Reverse Tabnabbing Protection
Content
Medium
Passed
Reverse Tabnabbing Protection
ContentMedium
X-Content-Type-Options header
Headers
Medium
Passed
X-Content-Type-Options header
HeadersMedium
Permissions-Policy header
Headers
Medium
Passed
Permissions-Policy header
HeadersMedium
Content-Type header
Headers
Medium
Passed
Content-Type header
HeadersMedium
Referrer Policy
Headers
Medium
Passed
Referrer Policy
HeadersMedium
Cross-Origin Resource Isolation
Headers
Medium
Passed
Cross-Origin Resource Isolation
HeadersMedium
Cipher Suite
TLS
Medium
Passed
Cipher Suite
TLSMedium
HSTS Preload Readiness
TLS
Low
Failed
HSTS Preload Readiness
TLSLow
Security.txt (RFC 9116)
Content
Low
Passed
Security.txt (RFC 9116)
ContentLow
Robots.txt Security Audit
Content
Low
Passed
Robots.txt Security Audit
ContentLow
Server information disclosure
Headers
Low
Passed
Server information disclosure
HeadersLow
Deprecated X-XSS-Protection header
Headers
Low
Passed
Deprecated X-XSS-Protection header
HeadersLow
What We Check on Epic Games
TLS / HTTPS Security
We verify that epicgames.com uses HTTPS with a valid TLS certificate, modern cipher suites, and proper HSTS configuration to protect data in transit.
Security Headers
We check whether epicgames.com sends critical headers like Content-Security-Policy, X-Frame-Options, and Permissions-Policy to defend against XSS and clickjacking.
Content Security
We scan epicgames.com for mixed content, vulnerable JavaScript libraries, exposed admin panels, and information disclosure risks.
DNS & Email Security
We validate SPF, DKIM, and DMARC records for epicgames.com, check DNSSEC, and test for subdomain takeover vulnerabilities.
Scan Your Own Website
See how your site compares to Epic Games. Run a free security scan with 62 checks and get actionable fix instructions.
Start Free Scan