Failing PCI Vulnerability Scan

[lshroff]

Hello,

We ran a PCI scan on our HubSpot website, and we are failing an element of our PCI scan with the scan stating that they found a vulnerability with SSL servers using TLS 1.0.

In our Settings -> Domains and URLs, all our domains are set to require HTTPS + TLS 1.2+.

Is there any other setting we are missing to make sure no SSL-enabled servers are using TLS 1.0?

Thanks

[lshroff]

Thank you very much for your reply! We have configured our security settings based on the linked documentation, and will follow-up if we have questions!

[Josh · Accepted solution]

Hi @lshroff,

One thing you can check is that your TLS setting is set to 1.2+ for all domains on the account; which would include subdomains, secondary domains, and redirected domains (for example, non-www to www).

Just in case you don't already have this: https://knowledge.hubspot.com/domains-and-urls/ssl-and-domain-security-in-hubspot

Josh