What is the security score of canadapost.ca?

canadapost.ca scored 40 out of 100 in Guard's security assessment. This indicates an elevated risk level with significant security gaps that should be addressed.

What does Canada Post do?

Canada Post operates in the Transportation sector based in Canada. The website is built using jQuery, Foundation 6.4, Adobe DTM (Dynamic Tag Management). Guard's scan analyzes the website's security infrastructure and compliance posture.

Is canadapost.ca a scam?

Guard's security scan evaluates canadapost.ca across multiple security dimensions including SSL certificate validity, security headers, DNS configuration, email authentication (SPF, DKIM, DMARC), and regulatory compliance (GDPR, NIS2). With a score of 40/100 classified as "Elevated Risk", review the detailed findings above to make an informed assessment about the website's trustworthiness.

Is canadapost.ca Safe? Score 40/100 | Guard

Q: Is canadapost.ca safe to use?

Based on Guard's automated security analysis, canadapost.ca received a security score of 40/100 and is classified as "Elevated Risk". Canada Post is the national postal service provider in Canada, offering a wide range of mailing, shipping, money transfer, marketing, and e-commerce support services to individuals and businesses. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong

Is canadapost.ca Safe? Security Analysis for Canada Post

http://canadapost.ca

Check if canadapost.ca is a scam or legitimate. Free security scan and reviews.

TransportationCanadaenterprise

jQueryFoundation 6.4Adobe DTM (Dynamic Tag Management)QualtricsGoogle Analytics+5 more

Analyzed 6/15/2025Completed 9:49:33 PM9mo ago

Security Score

HIGH RISK

10,000+

Domains scanned

500+

Security teams trust us

EveryPay

Secure checkout

Instant

Reports delivered

Professional PDF & Marketing Data

Get the professional PDF report for canadapost.ca

Export this security analysis as a professional PDF document, receive it via email, and access marketing intelligence data including contact emails and phone numbers. One-time purchase for lifetime access.

PDF Report & Export

PDF download, email delivery, unlock code

39.90 €one-time • Incl. 21% VAT

Marketing Intelligence

Contact emails, phone numbers & warm leads

49.90 €one-time • Incl. 21% VAT

Plan Comparison

Feature	PDF Report	Marketing+
Full security analysis
Professional PDF export
Email delivery
Lifetime access + unlock code
Contact emails & phones	—
Marketing outreach data	—

Delivery email

Already purchased?

Order summary

Domaincanadapost.ca

Access tierFull report or marketing add-on

I have read and agree to the Terms & Conditions and Privacy Policy.I acknowledge the Returns & Refunds policy and understand the digital delivery terms.

Digital reports are delivered immediately after payment. By continuing you acknowledge the withdrawal waiver described in our Returns & Refunds policy.

Secure payments processed via EveryPay. Prices in EUR; Incl. 21% VAT.

SEQ SIA

Lastadijas 12 k-3, Riga, Latvia, LV-1050

Reg. No. 40203410806 • VAT LV40203410806

Support: guard@offseq.com • +371 2256 5353

AI Summary

Canada Post is the national postal service provider in Canada, offering a wide range of mailing, shipping, money transfer, marketing, and e-commerce support services to individuals and businesses. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site uses modern frameworks such as Foundation and jQuery, along with advanced marketing and analytics tools including Adobe DTM, Google Analytics, and Qualtrics. However, a critical security issue is the invalid SSL certificate and lack of enabled TLS protocols, which significantly impacts the security posture. Privacy policies and cookie consent mechanisms are well implemented, supporting GDPR compliance. Overall, the site is professional and trustworthy but requires urgent remediation of SSL and TLS configurations to ensure secure user interactions.

Detected Technologies

jQueryFoundation 6.4Adobe DTM (Dynamic Tag Management)QualtricsGoogle AnalyticsGoogle Tag ManagerWistiaBoldChatArcGISFoundation

11 urgent findings need attention

3 critical · 8 high

+ 3 more findings in the full report below

Continuous monitoring

Keep canadapost.ca under constant watch

Guard tracks your live infrastructure daily: certificate expiry, DNS & mail authentication drift, uptime changes, subdomain inventory, and unexpected tracker or content shifts. A full timeline captures every diff so you can prove remediation and spot regressions instantly.

Security drift alerts

Risk score drops, new high-severity issues, and header hardening gaps

Compliance watch

GDPR / NIS2 posture changes with governance evidence snapshots

Infrastructure surface

Unexpected open services, SSL expiry, DNS & email authentication changes

Content & tracker intelligence

Marketing tech shifts, analytics drift, and AI recommendation updates

25 €

per month · billed securely via EveryPay

Less than 1 € / day — cheaper than a single incident response hour

Cancel anytime. Alerts sent to the contacts you choose. Unlock the full report to view historical timelines and alerts.

Purchase to access the monitoring timeline, JSON diffs, alert history, and PDF export for canadapost.ca.

Security Headers

3 findings

80/100

GDPR Compliance

6 findings

0/100

NIS2 Compliance

8 findings

5/100

Email Security

1 finding

50/100

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

Canada Post holds a dominant position in the Canadian transportation and postal sector, serving a broad customer base from personal users to large commercial clients. The business model integrates traditional postal services with digital and marketing solutions, including direct mail campaigns and e-commerce enablement. Partnerships with technology and marketing service providers enhance their offerings. The website content and structure indicate a focus on customer convenience, digital transformation, and sustainability initiatives. The absence of direct contact emails or phone numbers suggests reliance on web forms and support pages for customer interaction.

Security Posture Analysis

Comprehensive Security Assessment

The website demonstrates good security practices with multiple security headers and use of HttpOnly and Secure cookies. However, the invalid SSL certificate and disabled TLS protocols represent a critical vulnerability that could expose users to man-in-the-middle attacks and data interception. The Content Security Policy is only in report-only mode, limiting its effectiveness. No explicit incident response or vulnerability disclosure information is available, which could hinder timely security issue reporting and resolution. Overall, the security maturity is moderate but requires immediate attention to SSL/TLS issues.

Strategic Recommendations

Priority Actions for Security Improvement

Immediately renew and properly configure the SSL certificate to enable HTTPS securely.

Get this report delivered to your inbox

Receive a summary of the canadapost.ca security findings by email. Quick and easy to share with decision makers.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

80/100

Score

Weak Referrer-Policy configuration

LOW

Current value: "no-referrer-when-downgrade"

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

Sensitive data may be cached

LOW

Cache-Control header should include "no-store" for sensitive pages

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

5/100

Score

No HTTPS encryption

CRITICAL

NIS2 requires appropriate technical measures including encryption

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

Need this report as a PDF?

Download the complete canadapost.ca security analysis as a professional PDF. Share it with your team, clients, or stakeholders.

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

50/100

Score

Email Security Check Incomplete

MEDIUM

Some email security checks timed out

SPF

Sender Policy Framework

DKIM

DomainKeys Identified Mail

DMARC

Domain-based Message Authentication

MX Records

Mail Exchange Records

BIMI

Brand Indicators

MTA-STS

Mail Transfer Agent Security

TLS-RPT

TLS Reporting

DNSSEC

DNS Security

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

0/100

Score

No HTTPS Encryption

CRITICAL

Website does not use HTTPS encryption, making all data transmission vulnerable to interception

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

50/100

Score

DNS Health Check Incomplete

MEDIUM

Some DNS health checks timed out

DNSSEC Status

DNSSEC Not Enabled

⚡Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

100/100

Score

Good Network Security Posture

LOW

No unnecessary services detected on common risky ports

How does canadapost.ca compare?

canadapost.ca scores below average. Browse similar domains to see how competitors handle security.

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website uses a modern front-end framework (Foundation 6.4) and jQuery for UI components and interactions. It integrates multiple third-party marketing and analytics tools such as Adobe DTM, Google Analytics, Qualtrics, and Comscore, indicating a sophisticated digital marketing infrastructure. The site is mobile optimized with responsive images and layout. However, performance metrics are not provided, so load speed assessment is unavailable. The CMS appears custom or proprietary, with no common CMS signatures detected. Accessibility features like skip navigation and ARIA labels are implemented, supporting good usability. The invalid SSL and lack of TLS support pose operational risks that could affect user trust and compliance.

Professional PDF & Marketing Data