Failing PCI Vulnerability Scan

Develop, Build & Integrate APIs & Integrations
1

Hello,

We ran a PCI scan on our HubSpot website, and we are failing an element of our PCI scan with the scan stating that they found a vulnerability with SSL servers using TLS 1.0.

In our Settings → Domains and URLs, all our domains are set to require HTTPS + TLS 1.2+.

Is there any other setting we are missing to make sure no SSL-enabled servers are using TLS 1.0?

Thanks

2

Hi @lshroff,

One thing you can check is that your TLS setting is set to 1.2+ for all domains on the account; which would include subdomains, secondary domains, and redirected domains (for example, non-www to www).

Just in case you don’t already have this: SSL and domain security in HubSpot

Josh

3

Thank you very much for your reply! We have configured our security settings based on the linked documentation, and will follow-up if we have questions!