Think Secure security: cyber posture score and public checks

Security checks by ResilientX

Observed

2/5 public checks passed 2 of 5 public checks passed

Read from think-secure.nl the way any browser or mail server would.

Email 0/2 2 failed
DNS 2/3 1 needs attention
Website 0/0 All passed
Disclosure 0/0 All passed

Email

0 of 2 passed

SPF
Fail

No SPF record, so receiving servers cannot tell which servers may send mail for think-secure.nl.
DMARC
Fail

No DMARC record, so anyone can send mail that looks like it comes from think-secure.nl.
Mail servers
Info

2 mail servers receive mail for think-secure.nl.

DNS

2 of 3 passed

CAA record
Attention

No CAA record, so any certificate authority may issue certificates for think-secure.nl.
DNSSEC
Pass

DNS answers for think-secure.nl are signed (DNSSEC), so they cannot be forged on the way.
Subdomain takeover
Pass

No dangling DNS records that someone else could take over were found for think-secure.nl.

Website

HTTPS
Info

The website does not answer over HTTPS.
TLS version
Info

Connections use an outdated protocol ().
Certificate
Info

The certificate is expired or not trusted by browsers.
Security headers
Info

The website sends none of the common protective headers.

Disclosure

security.txt
Info

No security.txt file, so researchers have no published way to report a vulnerability.
Trust page
Info

No trust or security page found at the usual addresses.

These checks read what any browser or mail server can see. They are not a penetration test or an audit. Checked October 22, 2026.

Frequently asked questions

How secure is Think Secure?

ResilientX measures Think Secure’s cyber posture score from outside at 40.52 out of 100 (medium exposure; lower is better) as of October 22, 2026. It is not an audit. Details

Is Think Secure ISO 27001 certified?

Think Secure has not published its certifications on its Trust Center yet.

Does Think Secure use DMARC?

No. think-secure.nl has no DMARC record, so mail pretending to come from it is not stopped.