Drokio TrustOS · Verified status

Drokio

Drokio · Verification pending

71/ 100 · Drokio Security Score

Last verified 2026-07-07 03:21Z

Next check 03:36Z

Valid through 2026-08-06

Status under active review. One or more critical controls require attention. Drokio operations is engaged and the public badge is held pending resolution. Site owner has been notified.

Score breakdown

trust freshness

100/100

State recomputed on each request with TTL cache per check (Fase B). Continuous telemetry ingest from sites (Fase C+).

backup health

0/100

Off-host backup is 67d old — exceeds policy (>7d).

hardening

100/100

Live HTTP HEAD https://drokio.com/. Passed: HSTS; X-Content-Type-Options nosniff; X-Frame-Options DENY; CSP; Cloudflare edge; Referrer-Policy; X-Drokio-Shield.

waf edge

70/100

Cloudflare edge confirmed (CF-RAY a173b6578969…); R1 registered with Rule ID; R2 registered with Rule ID; Rules registered but enforcement NOT observed in curl loop

threat detection

85/100

Status endpoint operational; Brain not currently reachable from edge (expected — Brain is on-premise localhost); Vigía-Dark OSINT (URLhaus+HIBP+PhishTank+GSB) deployed in plugin; Honeypots Espejismo + canaries Trampa deployed

identity 2fa

100/100

5/5 critical accounts in ✅; No SMS-only 2FA in critical accounts; 15 accounts/secrets cataloged with policies

incident hygiene

80/100

No post-mortems directory yet (young product, clean record). Will populate from real incidents going forward.

Active controls

Off-host backup

Off-host backup is 67d old — exceeds policy (>7d).

inactivelast check 2026-07-07 03:21Z

Hardening posture

Live HTTP HEAD https://drokio.com/. Passed: HSTS; X-Content-Type-Options nosniff; X-Frame-Options DENY; CSP; Cloudflare edge; Referrer-Policy; X-Drokio-Shield.

activelast check 2026-07-07 03:21Z

Trust freshness

State recomputed on each request with TTL cache per check (Fase B). Continuous telemetry ingest from sites (Fase C+).

activelast check 2026-07-07 03:21Z

Control timeline

TrustOS Fase C — multi-site enrolment internal2026-05-01 21:00Z
state_change
TrustOS Fase C — JSON persistence layer live2026-05-01 20:55Z
state_change
TrustOS Fase B — 7 sub-scores LIVE deployed2026-05-01 20:45Z
state_change
WAF rate limit rules R1+R2 applied in Cloudflare2026-05-01 16:00Z
waf
Off-host backup uploaded to Cloudflare R22026-04-30 15:37Z
backup
2FA verified on 5 critical accounts2026-04-30 14:30Z
identity
Cloudflare in front of drokio.com confirmed2026-04-30 14:00Z
waf
Hardening Fase 1 + Stabilization Fase 2 merged2026-04-30 08:00Z
hardening

Embed this badge

Show your customers their site is live-monitored by Drokio. The badge updates in near real-time.

<a href="https://www.drokio.com/verify/drokio">
  <img src="https://drokio.com/api/v1/badge/drokio"
       alt="Drokio · Verification pending" />
</a>