pylonsproject.org

Welcome to the Pylons Project

The Pylons Project Organization develops web application framework technology in Python. This site provides an easy entry point into Pylons Project Organization projects.

Built with

Frontend framework

Hugo

Generator tag

Hugo 0.69.2

Also detected

Infrastructure

GitHub Pages · Nginx · Varnish

Overview

Status

alive

Registered

2010-12-27 (16 years ago)

First seen here

2026-09-22

Security grade

F (40/100, from headers & TLS)

Privacy score

92/100 (1 third-party script hosts, 0 tracking/marketing services)

Hosting

Akamai Technologies, Inc. · AS63949 · United States

Server header

nginx

Response time

579 ms to first byte, measured from our crawler

TLS certificate

Let's Encrypt · TLSv1.2 · expires 2026-11-30

Mobile-ready

yes (viewport meta tag)

Linked to from

9 other sites seen so far

Loads scripts from

Third-party domains this page pulls JavaScript or iframes from. Each one can see who visits.

What to fix

1. Add Strict-Transport-Security
   Header: Strict-Transport-Security: max-age=31536000; includeSubDomains
2. Add a Content-Security-Policy
   Limits which scripts can run, and is the main defense against XSS. Start with Content-Security-Policy-Report-Only to test.
3. Add X-Content-Type-Options
   Header: X-Content-Type-Options: nosniff
4. Prevent clickjacking
   Header: X-Frame-Options: DENY (or a CSP frame-ancestors directive).
5. Add a Referrer-Policy
   Header: Referrer-Policy: strict-origin-when-cross-origin
6. Publish a DMARC record
   A TXT record at _dmarc.<domain>; start with v=DMARC1; p=none; to monitor.

Security & email signals

• ✓ HTTPS
• ✗ HSTS
• ✗ Content-Security-Policy
• ✗ X-Content-Type-Options
• ✗ X-Frame-Options
• ✗ Referrer-Policy
• ✗ Permissions-Policy
• ✓ SPF record
• ✗ DMARC record
• ✗ DKIM record
• ✓ Cookies set securely
• ✓ Has real content (not an empty shell)
• ✓ Valid TLS certificate

Badge

Show this site's security grade in a README or footer:

<a href="https://webtelemetry.dev/site/pylonsproject.org"><img src="https://webtelemetry.dev/badge/pylonsproject.org.svg" alt="Security grade"></a>

Generated automatically from passive, publicly observable data. Think something here is wrong or want this profile removed? See /bot. Machine-readable: JSON.