APRA · Domain Security

Apra Domain Security

Domain security

Domain security posture for APRA, probed live across 4 host(s) and 1 registrable domain(s). 3 host(s) serve HTTPS (up to TLSv1.3); 2 advertise HSTS. Email/DNS controls: DNSSEC present, SPF present, DMARC present (p=reject).

InsuranceAustraliaRegulatorPrudential RegulationGeneral InsuranceLife InsurancePrivate Health InsuranceRegulatory ReportingMarket InfrastructureRisk DataSuperannuationBanking

Transport & Host Security

www.apra.gov.au
HTTPS: yes · TLS: TLSv1.3 · HSTS: yes · cert expires: Oct 13 07:08:38 2026 GMT
connect.apra.gov.au
HTTPS: yes · TLS: TLSv1.2 · HSTS: yes · cert expires: Feb 15 23:59:59 2027 GMT
connect-test.apra.gov.au
HTTPS: yes · TLS: TLSv1.2 · HSTS: no · cert expires: Feb 15 23:59:59 2027 GMT
api.apra.gov.au
HTTPS: no · HSTS: no

Domain (DNS/Email) Security

apra.gov.au
DNSSEC: yes · SPF: yes · DMARC: yes (p=reject) · CAA: none

Source

Domain Security

apra-domain-security.yml Raw ↑ 
generated: '2026-07-25'
method: probed
source: live DNS/TLS/HTTP probes of apis.yml hosts (corporate site + APRA Connect
  production/test + the unreachable api. name)
hosts:
- host: www.apra.gov.au
  https: true
  tls_version: TLSv1.3
  cert_expires: Oct 13 07:08:38 2026 GMT
  hsts: true
  hsts_max_age: 31557600
- host: connect.apra.gov.au
  https: true
  tls_version: TLSv1.2
  cert_expires: Feb 15 23:59:59 2027 GMT
  hsts: true
  hsts_max_age: 15552000
  hsts_include_subdomains: true
  note: APRA Connect production. F5 BIG-IP WAF answers anonymous requests with an HTTP
    200 "Request Rejected" page. Highest negotiated protocol observed was TLSv1.2.
- host: connect-test.apra.gov.au
  https: true
  tls_version: TLSv1.2
  cert_expires: Feb 15 23:59:59 2027 GMT
  hsts: false
  note: APRA Connect test environment. Anonymous request returns HTTP/1.0 302 from
    BigIP; no Strict-Transport-Security header observed on that redirect.
- host: api.apra.gov.au
  https: false
  note: DNS A record 124.47.155.12 exists, but TCP/443 and TCP/80 both time out — no
    service is published on this name as of 2026-07-25. Recorded because the earlier
    review noted this name as non-resolving; it now resolves but does not answer.
domains:
- domain: apra.gov.au
  dnssec: true
  caa: []
  spf: true
  dmarc: true
  dmarc_policy: reject