WQI.web​qualityindex
Method v1.1.0 85 live / 86 total factors methodology

/ / d / stripe.com

stripe.com

64 / 100
overall · band: medium
scanned2026-04-26 23:19:10Z
methodv0.1 — 2026-04-25
verdicts35 pass 6 warn 32 fail 13 n/a
rescan
writes a fresh score to the registry

Categories

Security64/ 100 · 9 measured
Performance49/ 100 · 9 measured
SEO53/ 100 · 7 measured
AI-readiness66/ 100 · 4 measured
Privacy35/ 100 · 6 measured
Accessibility83/ 100 · 6 measured
Brand presence32/ 100 · 16 measured
Email health56/ 100 · 16 measured

Site facts

Snapshot date
2026-04-26
Factors scored
73 / 86
Composite score
64/100
Method version
v0.1 — 2026-04-25

Security· 64/100

#FactorVerdictScoreEvidence
4Security headers (HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy, X-Content-Type-Options)pass80security_headers_score=80, missing=Permissions-Policy|X-XSS-Protection
5SSL certificate validity & expiration windown/a—Scoring not yet implemented
6WordPress REST API user enumeration exposurepass100not_wordpress
7Sensitive path exposure (.git, .env, /admin, xmlrpc.php, wp-login.php)pass100total_checked=6
22DNSSEC validationfail0ds_present=false, ad_bit=false
23CAA recordsfail0records=\# 39 00 05 69 6f 64 65 66 6d 61 69 6c 74 6f 3a 63 61 61 2d 76 69 6f 6c 61 74 69 6f 6e 73 40 73 74 72 69 70 65 2e 63 6f 6d|\# 17 00 05 69 73 73 75 65 61 6d 61 7a 6f 6e 2e 63 6f 6d|\# 19 00 05 69 73 73 75 65 64 69 67 69 63 65 72 74 2e 63 6f 6…
26HSTS preload list inclusionpass100hsts_header=max-age=63072000; includeSubDomains; preload, preload_status=preloaded
27TLS minimum version & cipher suite qualitypass100status=READY, grades=A+|A+, worst=A+
28Subdomain takeover surfacepass100findings={"subdomain":"www.stripe.com","cname":"stripe.com.","dangling":false}|{"subdomain":"mail.stripe.com","cname":"fe-nlb.stripe.com.","dangling":false}|{"subdomain":"blog.stripe.com","cname":"fe-nlb.stripe.com.","dangling":false}|{"subdomain":"…
29Spam / phishing blocklist presencefail0listed=true, response_code=0, answers=127.255.255.254

Performance· 49/100

#FactorVerdictScoreEvidence
8Mobile PageSpeed score + Core Web Vitals (LCP, FCP, CLS)warn51performance_score=42, lcp_ms=7727.002341080118, cls=0, components={"perf":42,"lcp":30,"cls":100}
9HTTP/2 supportn/a—Scoring not yet implemented
10Compression (Brotli / gzip)pass80perf_compression=gzip
30HTTP/3 supportfail0supports_h3=false
31IPv6 supportfail0aaaa_count=0
32Image optimization (WebP/AVIF)warn70id=image-delivery-insight, lighthouse_score=0.5, displayValue=Est savings of 208 KiB
33Desktop PageSpeed scoren/a—Scoring not yet implemented
34Core Web Vitals from CrUX (Real User Monitoring)n/a—Scoring not yet implemented
35Lazy loading on below-fold imagesfail40id=image-delivery-insight, lighthouse_score=0.5, displayValue=Est savings of 208 KiB
36Font loading strategy (FOUT/FOIT/swap)pass100id=font-display-insight, lighthouse_score=1
37Total homepage byte weightpass100html_bytes=512000, subresource_bytes=0, total_bytes=512000, total_kb=500, sampled=0, total_refs=0
38Largest unused JavaScript bundlefail0deferred_scripts=70, sample=https://b.stripecdn.com/mkt-ssr-statics/assets/_next/static/chunks/polyfills-42372ed130431b0a.js|https://b.stripecdn.com/mkt-ssr-statics/assets/_next/static/chunks/2791.83aa5fb914de3e9d.js|https://b.stripecdn.com/mkt-ssr-…

SEO· 53/100

#FactorVerdictScoreEvidence
11Title, meta description, OG, Twitter cards, canonicalpass100title=true, description=true, og=true, twitter=true, canonical=true
12Schema.org structured data presencefail0structured_data_absent
13H1 tag presencewarn70h1_count=2, h1_text=Financial infrastructure to grow your revenue. Accept payments, offer financial services, and implement custom revenue models—from your first transaction to your billionth.
14Sitemap.xml + robots.txt presencepass100has_robots_txt=true, has_sitemap=true
39Schema.org type validity (parsed JSON-LD)n/a—Scoring not yet implemented
40Breadcrumb schemafail0present=false
41FAQ / HowTo schema (where applicable)n/a—n/a — not_applicable
42hreflang for multi-language sitesn/a—n/a — single_language
43Internal link depth (clicks from homepage to deepest content)pass100max_depth=1, pages_fetched=50, pages_seen=248, capped_at=50
61Better Business Bureau accreditationfail0no_link_on_site

AI-readiness· 66/100

#FactorVerdictScoreEvidence
15llms.txt presencepass100has_llms_txt=true, size_bytes=63917
16AI crawler robots.txt directivespass100robots_ai_blocked_count=0
44AI plugin manifest (.well-known/ai-plugin.json)fail0status=404
45JSON-LD richness score for LLMswarn62org_complete=true, has_address=false, has_contact_point=true, has_same_as=true, has_content_type=false, breakdown={"coreOrg":25,"contact":12,"sameAs":25,"contentType":0}

Privacy· 35/100

#FactorVerdictScoreEvidence
46Cookie banner presence + CMP detectionwarn50banner_detected=true
47Privacy policy page presencefail0found=false
48Terms of service page presencefail0found=false
49Third-party tracker countpass80count=3, hosts=assets.stripeassets.com|b.stripecdn.com|images.stripeassets.com
50CCPA "Do Not Sell or Share My Personal Information" linkfail0found=false
51Cookie scan — actual cookies set on first loadpass80count=1, names=cid, with_cmp=false

Accessibility· 83/100

#FactorVerdictScoreEvidence
52Accessibility statement pagefail0found=false
53axe-core / WAVE accessibility scanpass100accessibility_category=1
54Image alt text coveragepass100lighthouse_score=1, failing_count=0
55Heading hierarchy validitypass100lighthouse_score=1
56Color contrast (WCAG AA)pass100lighthouse_score=1, failing_count=0
57ARIA labels presence and validitypass100total_aria_audits=22, applicable=11, passing=11
58Skip-to-content linkn/a—Scoring not yet implemented

Brand presence· 32/100

#FactorVerdictScoreEvidence
17Domain age (RDAP / WHOIS)pass100domain_age_years=30.6
18Wayback Machine site age & last snapshotn/a—Scoring not yet implemented
19Google Business Profile presence + ratingpass80found=true, rating=3.6, review_count=733
20News mentions in last 30 dayspass85news_mentions_count=20
21Wikipedia entitypass100found=true, title=Stripe, url=https://en.wikipedia.org/wiki/Stripe
59Yelp presence + rating + review countfail0no_link_on_site
60Trustpilot presence + ratingfail0no_link_on_site
62LinkedIn Company Page (presence + employee count + follower count)fail0no_link_on_site
63Bing Placesn/a—n/a — no_public_url_convention
64Apple Maps presence (Apple Business Connect)fail0no_link_on_site
65Facebook Page presencefail0no_link_on_site
66Instagram presence (link from site → IG profile)fail0no_link_on_site
67Web App Manifest (manifest.json)n/a—Scoring not yet implemented
68Service Worker / PWA capabilityn/a—Scoring not yet implemented
69Analytics tools detectedfail0count=0
70Payment processors detectedn/a—n/a — no_payment_detected
71Marketing automation tools detectedfail0count=0
72Customer support tools detectedfail0count=0
73Tag manager presencewarn50count=0
74Ad networks detectedpass100count=0
83Visible contact form on sitefail0detected=false, count=0

Email health· 56/100

#FactorVerdictScoreEvidence
1DMARC enforcementpass100present=true, policy=reject
2DKIM signingpass100present=true, selector=google, source=doh_probe
3SPF record present and validpass100present=true, raw="v=spf1 ip4:198.2.180.60/32 ip4:13.111.2.227/32 include:spf1.stripe.com include:greenhouse-outbound-mail.stripe.com include:_spf.qualtrics.com ~all", qualifier=softfail
24MTA-STS & TLS-RPTfail0policy_ok=false
25BIMI + VMCfail0no_bimi
75Branded domain email address (vs free Gmail/Yahoo)pass100branded=true, provider=google
76Email provider class (Workspace / 365 / Zoho / self-hosted / shared)pass100provider=google
77DMARC aggregate reporting enabled (rua=)pass100has_dmarc_reporting=true, audit_flag=true, derived_from_raw=true, source=derived_from_raw, dmarc_raw="v=DMARC1; p=reject; pct=100; fo=1; rua=mailto:dmarc-reports@stripe.com; ruf=mailto:dmarc-forensics@stripe.com;"
78Free-email exposure on contact page (gmail/yahoo/outlook visible)pass100Scored
79Newsletter signup form detectedfail0detected=false
80Email Service Provider (ESP) detectedfail0Scored
81Transactional email provider detected (from SPF includes)fail0Scored
82SPF lookup count (10-limit deliverability check)pass100lookups=7, limit=10
84Mailto: direct contact link presentfail0Scored
85Email forwarding service detected (improvmx, forwardemail, etc.)pass100hosts=aspmx.l.google.com|alt1.aspmx.l.google.com|alt2.aspmx.l.google.com|aspmx2.googlemail.com|aspmx3.googlemail.com, provider=Google Workspace, kind=branded
86Lead magnet / signup incentive detected (free download, ebook, etc.)fail0detected=false

Scores are computed under method v0.1 — 2026-04-25. See the methodology for the full factor list and per-factor specifications.