Data Trust & Reputation Checker: Is This Site Safe?
Paid: pay as you go or pick a plan. Enter a domain for a 0 to 100 trust score and a high-risk verdict when red flags appear. Try with
- Four signals, one score
- Pay as you go
.svg)
The checker gives one 0 to 100 trust score for any site and a high-risk verdict when serious red flags appear. Score uses fixed weights: security 35 percent, privacy 25 percent, Safe Browsing 25 percent, reputation 15 percent.
Low-risk verdict
92 / 100
- Security
- 95
- Privacy
- 90
- Safe Browsing
- Clean
- Reputation
- 90
Why check trust before you share data
Vet a vendor before you hand over data
Before you connect a tool to your CRM, payroll or customer database, read its security headers in one pass.
Stop before you pay
A malware flag on a checkout page is a stop sign.
Due diligence in minutes
Grounded web search looks for breaches, lawsuits and regulatory actions, labelled as publicly reported and not as legal determinations. It saves hours of manual news search.
How the StartupHub.ai trust checker works
- Step 1
Enter a domain
Enter a domain, and optionally the company name to disambiguate it.
- Step 2
Four signals are checked
Security posture covers HTTPS with HSTS, Content-Security-Policy, X-Frame-Options and Referrer-Policy. Google Safe Browsing gives the malware and phishing verdict and a malware flag alone forces a high-risk verdict whatever the other signals say.
- Step 3
Read the score and the verdict
stripe.com checked 27 August 2026 scored 92, low-risk: HTTPS with HSTS and a hardened CSP, a real privacy policy, Safe Browsing clean, no breaches on record. A signal that cannot be resolved is dropped and the score is re-normalised over the signals that did resolve.
What people use it for
Before you connect a SaaS tool to your CRM, payroll or customer database, read its security headers, privacy policy and public record in one pass instead of five separate tabs.
An OAuth integration or data share is only as safe as the partner's posture. Run the domain once and see whether the gap is technical (no HSTS), legal (no privacy terms), or reputational (reported breach).
A Safe Browsing malware flag or a missing privacy policy on a checkout page is a stop sign. The score tells you whether to proceed, dig deeper, or walk away before you enter a card number.
Reputation findings surface publicly reported breaches, lawsuits and regulatory actions from grounded search. They are conservative, source-linked, and not legal determinations, but they save hours of manual news search.
Before you connect a SaaS tool to your CRM, payroll or customer database, read its security headers, privacy policy and public record in one pass instead of five separate tabs.
- Mistral AI97Trusted
- Vercel96Trusted
- Linear95Trusted
- Runway93Trusted
- ElevenLabs87Trusted
- Notion78Generally safe
One pass per vendor
Highest: Mistral AI, 97 · Notion: 78, generally safe · Checked: Oct 2026
Keep using it
Free
0 checks a day
On this page, no card.
Trust checks wherever you work
It runs from an AI agent over MCP, over the REST API, and Deep Intelligence takes the check further into the public record.
MCP and AI agents
The check_trust_reputation tool runs the same check over MCP with an API key in Claude, ChatGPT, Cursor and n8n.
> Add the MCP server https://www.startuphub.ai/api/v1/mcp (name: StartupHub.ai) and use its check_trust_reputation tool to vet a domain before I share data with it.
> Is stripe.com safe to share customer data with?
● startuphub - check_trust_reputation (MCP)
⎿ score: 92 / 100, verdict: low-risk
● stripe.com scores 92, low-risk. Safe Browsing clean, no breaches on record.
Claude Code
Claude Code connects once to our MCP server and can check any domain mid-task. The check_trust_reputation tool runs the check over MCP with an API key.
Set up in Claude Code{
"score": 92,
"verdict": "low-risk",
"breakdown": { ... }
}Trust score API
Same check runs over the REST API so a vendor list can be screened in one pass. Reports are cached for a day for repeat checks.
Read the API docsDossier: a company
- FilingsFound
- OwnershipFound
- PeopleFound
Deep Intelligence
Deep Intelligence on the same site returns a public-record dossier on a company: filings, ownership, people.
Open Deep IntelligenceFind more data on the companies you care about
StartupHub.ai profiles AI startups, investors and people with funding, team and tech stack data on the site, over the REST API and over MCP.
- REST API and MCP
- Pay as you go
- Free to start
Platform
Find leads on StartupHub.ai
Search startups, investors and people then find and verify their work emails. Start free with no account needed.
Search the directoryData
Use our data API
Put startup, investor, people and email data inside your product over a REST API and pay as you go per call.
Read the API docsAI
Add StartupHub.ai to AI
Give AI assistants and agents our data over MCP. The MCP connection works in Claude, ChatGPT, Cursor and n8n.
Connect StartupHub.ai to AIWhat trust score measures: four signals, one score
Malware verdict via Google Safe Browsing. Reputation via grounded web search over public sources, labeled as publicly reported rather than legal determinations. Findings are conservative and only surface when real sources back them.
1. Security posture
Is the connection secure and hardened?35% of the scoreHTTPS plus hardening headers: HSTS, Content-Security-Policy, X-Frame-Options and Referrer-Policy. A padlock alone is not enough if the headers that stop downgrade and injection attacks are missing.
2. Data-practice transparency
Does the company publish real privacy terms?25% of the scoreA reachable privacy policy plus references to GDPR, CCPA and cookie consent. Sites that collect email or payment data without any of this are scored accordingly.
3. Safe Browsing
Malware or phishing flag?25% of the scoreGoogle Safe Browsing malware and phishing verdict. A malware flag alone forces a high-risk verdict regardless of every other signal.
4. Public reputation
Breaches, lawsuits, regulatory action?15% of the scoreGrounded web search over public sources for data breaches, lawsuits, regulatory actions and credible complaint patterns. Findings are labeled publicly reported, not legal determinations, and only surface when real sources back them.
Example trust reports
Illustrative reports showing how the four signals combine into a trust score and verdict. Run the checker above on any live domain for current numbers.
Example: sketchy-crypto-site.com - Tested 27 August 2026
Trust Score: 28/100 · High-risk
- Security: 40 - HTTPS yes, HSTS no, CSP missing
- Privacy: 10 - No privacy policy, no GDPR/CCPA
- Safe Browsing: MALWARE - Flagged for phishing (forces high-risk)
- Reputation: 15 - 2 reported breaches (2024, 2025), 1 lawsuit
Example: stripe.com - Tested 27 August 2026
Trust Score: 92/100 · Low-risk
- Security: 95 - HTTPS, HSTS, CSP hardened
- Privacy: 90 - Real privacy policy, GDPR/CCPA, consent
- Safe Browsing: Clean
- Reputation: 90 - No breaches, no regulatory actions on record
What does a high-risk verdict mean?
It means one or more serious red flags: no HTTPS, a Safe Browsing malware flag, no privacy transparency, or credible reported breaches, lawsuits, or scam patterns. A Safe Browsing malware flag alone forces a high-risk verdict regardless of other signals.
Trust checker vs others
| SSL Labs | Safe Browsing | ScamAdviser | StartupHub | |
|---|---|---|---|---|
| HTTPS + hardening | Yes | No | Partial | YesSecurity posture |
| Privacy policy + GDPR/CCPA | No | No | No | YesTransparency |
| Malware/phishing | No | Yes | Yes | YesSafe Browsing, forces high-risk |
| Reputation: breaches, lawsuits | No | No | Partial | YesGrounded web search |
| One combined score | No | No | Yes0-100 | YesTrust score + high-risk verdict |
Comparison reflects publicly documented capabilities and is updated periodically.
Related checks
Trust sits alongside two other tools on this site. Run them together when vetting a vendor or partner.
- Tech Stack Checker reads DNS, TLS and mail records for vendors that never appear in page HTML.
- Website Speed Test feeds the site-health signal in our Agent Readiness and eDR checks.
Common questions about the trust checker.
If the answer is not here, reach us from the help and contact page.
Help and contactWhat does the trust score measure?
Four weighted signals: security posture (35%, HTTPS and hardening headers), data-practice transparency (25%, privacy policy plus GDPR/CCPA and consent), Google Safe Browsing malware/phishing (25%, a malware flag forces high-risk), and public reputation (15%, grounded web search for breaches, lawsuits and regulatory actions). Unavailable signals drop out and the score re-normalizes over the rest.
How reliable are the reputation findings?
Reputation findings come from grounded web search over public sources and are labeled as publicly reported, not legal determinations. They are conservative by design and only surface when real sources back them, but you should always verify independently before acting on them.
Why do some signals show as not checked?
Every signal is best-effort. If a data source needs a key that is not configured, or a service is rate-limited, that signal is dropped and the score is re-normalized over the ones that resolved. You still get a usable score instead of an error.
What does a high-risk verdict mean?
It means one or more serious red flags: no HTTPS, a Safe Browsing malware flag, no privacy transparency, or credible reported breaches, lawsuits, or scam patterns. A Safe Browsing malware flag alone forces a high-risk verdict regardless of the other signals.
Is this an is-this-site-safe checker?
Yes. Enter any domain and get a 0-100 trust score plus a high-risk verdict when serious red flags appear. It is built for vendor vetting, partner checks, and scam screening before you share email, payment, or company data.
Does a malware flag always mean high-risk?
Yes. A Google Safe Browsing malware or phishing flag caps the score and forces a high-risk verdict regardless of how strong the other signals look.
