| OK | IPv4 (A) | 30/30 | 1 IPv4 address(es) detected. |
| ERROR | IPv6 (AAAA) | 0/10 | 0 IPv6 address(es) detected. |
| OK | Name server redundancy | 20/20 | 2 NS record(s); 2 or more required. |
| OK | SOA record | 10/10 | Authoritative zone record. |
| ERROR | DNSSEC chain | 0/15 | Both DS and DNSKEY are required. |
| OK | CAA policy | 5/5 | Certificate authority restriction. |
| OK | DNS propagation | 10/10 | Agreement between public resolvers. |
| OK | MX records | 20/20 | 2 MX record(s). |
| OK | SPF | 25/25 | SPF policy published. |
| OK | DMARC | 25/25 | DMARC policy published. |
| ERROR | DKIM | 0/20 | No tested DKIM selector responded. |
| ERROR | MTA-STS | 0/5 | Mail transport policy. |
| ERROR | TLS-RPT | 0/5 | TLS reporting policy. |
| OK | Valid TLS certificate | 55/55 | 181 day(s) remaining. |
| OK | Certificate lifetime | 10/10 | Full points require at least 30 days remaining. |
| WARNING | HTTP security headers | 12/35 | 3 of 9 evaluated headers detected. |
| OK | PTR reverse DNS | 30/30 | PTR: men-tandem-lb-vip.dedie.ate.info |
| WARNING | IPv4 diversity | 20/35 | Two or more IPv4 addresses receive full points. |
| ERROR | IPv6 connectivity | 0/35 | AAAA availability. |
| OK | DNS resolution | 40/40 | At least one address family must resolve. |
| ERROR | HTTP response | 0/40 | HTTP/2 403 |
| OK | HTTPS final URL | 20/20 | Final URL uses HTTPS. |