What does the trust score measure?

Four weighted signals: security posture (35%, HTTPS and hardening headers), data-practice transparency (25%, privacy policy plus GDPR/CCPA and consent), Google Safe Browsing malware/phishing (25%, a malware flag forces high-risk), and public reputation (15%, grounded web search for breaches, lawsuits and regulatory actions). Unavailable signals drop out and the score re-normalizes over the rest.

How reliable are the reputation findings?

Reputation findings come from grounded web search over public sources and are labeled as publicly reported, not legal determinations. They are conservative by design and only surface when real sources back them, but you should always verify independently before acting on them.

Why do some signals show as not checked?

Every signal is best-effort. If a data source needs a key that is not configured, or a service is rate-limited, that signal is dropped and the score is re-normalized over the ones that resolved. You still get a usable score instead of an error.

Is this an is-this-site-safe checker?

Yes. Enter any domain and get a 0-100 trust score plus a high-risk verdict when serious red flags appear. It is built for vendor vetting, partner checks, and scam screening before you share email, payment, or company data.

Does a malware flag always mean high-risk?

Yes. A Google Safe Browsing malware or phishing flag caps the score and forces a high-risk verdict regardless of how strong the other signals look.

StartupHub.ai

Data Trust & Reputation · free tool

Data Trust & Reputation Checker: Is This Site Safe?

A site can serve HTTPS and still mishandle your data, get sued, or land on a malware blocklist. This checker pulls the signals that actually matter into one score: is the connection secure and hardened, does the company publish a real privacy policy and honor data-rights frameworks, has it been flagged for malware or phishing, and does its public record show breaches, lawsuits, or regulatory action. Use it to vet a vendor, a partner, or any site before you hand over an email, a payment, or company data.

What trust score measures: four signals, one score

Malware verdict via Google Safe Browsing. Reputation via grounded web search over public sources, labeled as publicly reported rather than legal determinations. Findings are conservative and only surface when real sources back them.

1. Security posture

Is the connection secure and hardened?35% of the score

HTTPS plus hardening headers: HSTS, Content-Security-Policy, X-Frame-Options and Referrer-Policy. A padlock alone is not enough if the headers that stop downgrade and injection attacks are missing.

2. Data-practice transparency

Does the company publish real privacy terms?25% of the score

A reachable privacy policy plus references to GDPR, CCPA and cookie consent. Sites that collect email or payment data without any of this are scored accordingly.

3. Safe Browsing

Malware or phishing flag?25% of the score

Google Safe Browsing malware and phishing verdict. A malware flag alone forces a high-risk verdict regardless of every other signal.

4. Public reputation

Breaches, lawsuits, regulatory action?15% of the score

Grounded web search over public sources for data breaches, lawsuits, regulatory actions and credible complaint patterns. Findings are labeled publicly reported, not legal determinations, and only surface when real sources back them.

Example trust reports

Illustrative reports showing how the four signals combine into a trust score and verdict. Run the checker above on any live domain for current numbers.

Example: sketchy-crypto-site.com - Tested 27 August 2026

Trust Score: 28/100 · High-risk

Security: 40 - HTTPS yes, HSTS no, CSP missing
Privacy: 10 - No privacy policy, no GDPR/CCPA
Safe Browsing: MALWARE - Flagged for phishing (forces high-risk)
Reputation: 15 - 2 reported breaches (2024, 2025), 1 lawsuit

Example: stripe.com - Tested 27 August 2026

Trust Score: 92/100 · Low-risk

Security: 95 - HTTPS, HSTS, CSP hardened
Privacy: 90 - Real privacy policy, GDPR/CCPA, consent
Safe Browsing: Clean
Reputation: 90 - No breaches, no regulatory actions on record

What does a high-risk verdict mean?

It means one or more serious red flags: no HTTPS, a Safe Browsing malware flag, no privacy transparency, or credible reported breaches, lawsuits, or scam patterns. A Safe Browsing malware flag alone forces a high-risk verdict regardless of other signals.

What people use it for

Vendor vetting before handing company data

Before you connect a SaaS tool to your CRM, payroll or customer database, read its security headers, privacy policy and public record in one pass instead of five separate tabs.

Partner check before integration

An OAuth integration or data share is only as safe as the partner's posture. Run the domain once and see whether the gap is technical (no HSTS), legal (no privacy terms), or reputational (reported breach).

Is this site legit / scam checker before payment

A Safe Browsing malware flag or a missing privacy policy on a checkout page is a stop sign. The score tells you whether to proceed, dig deeper, or walk away before you enter a card number.

Due diligence: breaches, lawsuits, regulatory

Reputation findings surface publicly reported breaches, lawsuits and regulatory actions from grounded search. They are conservative, source-linked, and not legal determinations, but they save hours of manual news search.

Trust checker vs others

Trust checker comparison: SSL Labs, Google Safe Browsing, ScamAdviser, StartupHub
	SSL Labs	Safe Browsing	ScamAdviser	StartupHub
HTTPS + hardening	Yes	No	Partial	YesSecurity posture
Privacy policy + GDPR/CCPA	No	No	No	YesTransparency
Malware/phishing	No	Yes	Yes	YesSafe Browsing, forces high-risk
Reputation: breaches, lawsuits	No	No	Partial	YesGrounded web search
One combined score	No	No	Yes0-100	YesTrust score + high-risk verdict

Comparison reflects publicly documented capabilities and is updated periodically.

Related checks

Trust sits alongside two other free tools on this site. Run them together when vetting a vendor or partner.

Tech Stack Checker reads DNS, TLS and mail records for vendors that never appear in page HTML.
Website Speed Test feeds the site-health signal in our Agent Readiness and eDR checks.

Trust checker FAQ

What does the trust score measure?: Four weighted signals: security posture (35%, HTTPS and hardening headers), data-practice transparency (25%, privacy policy plus GDPR/CCPA and consent), Google Safe Browsing malware/phishing (25%, a malware flag forces high-risk), and public reputation (15%, grounded web search for breaches, lawsuits and regulatory actions). Unavailable signals drop out and the score re-normalizes over the rest.
How reliable are the reputation findings?: Reputation findings come from grounded web search over public sources and are labeled as publicly reported, not legal determinations. They are conservative by design and only surface when real sources back them, but you should always verify independently before acting on them.
Why do some signals show as not checked?: Every signal is best-effort. If a data source needs a key that is not configured, or a service is rate-limited, that signal is dropped and the score is re-normalized over the ones that resolved. You still get a usable score instead of an error.
What does a high-risk verdict mean?: It means one or more serious red flags: no HTTPS, a Safe Browsing malware flag, no privacy transparency, or credible reported breaches, lawsuits, or scam patterns. A Safe Browsing malware flag alone forces a high-risk verdict regardless of the other signals.
Is this an is-this-site-safe checker?: Yes. Enter any domain and get a 0-100 trust score plus a high-risk verdict when serious red flags appear. It is built for vendor vetting, partner checks, and scam screening before you share email, payment, or company data.
Does a malware flag always mean high-risk?: Yes. A Google Safe Browsing malware or phishing flag caps the score and forces a high-risk verdict regardless of how strong the other signals look.

Malware verdict via Google Safe Browsing. Reputation via grounded web search. A StartupHub.ai tool.