Drokio TrustOS · Verified status

Drokio

drokio.com ↗

Protected by Drokio

81/ 100 · Drokio Security Score

Last verified 2026-05-06 07:38Z

Next check 07:53Z

Valid through 2026-06-05

Score breakdown

trust freshness

100/100

State recomputed on each request with TTL cache per check (Fase B). Continuous telemetry ingest from sites (Fase C+).

backup health

50/100

Off-host backup 5.7d ago — stale, refresh recommended (Task Scheduler cron pending — see W3 in FASE_A.1 closure).

hardening

100/100

Live HTTP HEAD https://drokio.com/. Passed: HSTS; X-Content-Type-Options nosniff; X-Frame-Options DENY; CSP; Cloudflare edge; Referrer-Policy; X-Drokio-Shield.

waf edge

70/100

Cloudflare edge confirmed (CF-RAY 9f7653415c21…); R1 registered with Rule ID; R2 registered with Rule ID; Rules registered but enforcement NOT observed in curl loop

threat detection

85/100

Status endpoint operational; Brain not currently reachable from edge (expected — Brain is on-premise localhost); Vigía-Dark OSINT (URLhaus+HIBP+PhishTank+GSB) deployed in plugin; Honeypots Espejismo + canaries Trampa deployed

identity 2fa

100/100

5/5 critical accounts in ✅; No SMS-only 2FA in critical accounts; 15 accounts/secrets cataloged with policies

incident hygiene

80/100

No post-mortems directory yet (young product, clean record). Will populate from real incidents going forward.

Active controls

Off-host backup

Off-host backup 5.7d ago — stale, refresh recommended (Task Scheduler cron pending — see W3 in FASE_A.1 closure).

partiallast check 2026-05-06 07:38Z

Hardening posture

Live HTTP HEAD https://drokio.com/. Passed: HSTS; X-Content-Type-Options nosniff; X-Frame-Options DENY; CSP; Cloudflare edge; Referrer-Policy; X-Drokio-Shield.

activelast check 2026-05-06 07:38Z

Trust freshness

State recomputed on each request with TTL cache per check (Fase B). Continuous telemetry ingest from sites (Fase C+).

activelast check 2026-05-06 07:38Z

Control timeline

TrustOS Fase C — multi-site enrolment internal2026-05-01 21:00Z
state_change
TrustOS Fase C — JSON persistence layer live2026-05-01 20:55Z
state_change
TrustOS Fase B — 7 sub-scores LIVE deployed2026-05-01 20:45Z
state_change
WAF rate limit rules R1+R2 applied in Cloudflare2026-05-01 16:00Z
waf
Off-host backup uploaded to Cloudflare R22026-04-30 15:37Z
backup
2FA verified on 5 critical accounts2026-04-30 14:30Z
identity
Cloudflare in front of drokio.com confirmed2026-04-30 14:00Z
waf
Hardening Fase 1 + Stabilization Fase 2 merged2026-04-30 08:00Z
hardening

Embed this badge

Show your customers their site is live-monitored by Drokio. The badge updates in near real-time.

<a href="https://drokio.com/verify/drokio">
  <img src="https://drokio.com/api/v1/badge/drokio"
       alt="Protected by Drokio" />
</a>