American Midstream Security Rating, Vendor Risk Report, and Data Breaches

American Midstream

American Midstream operates natural gas and crude oil pipelines and processing facilities across the United States. The company provides gathering, transmission, and processing services for energy producers in various regional markets. UpGuard continuously monitors the security posture of American Midstream using open-source, commercial, and proprietary threat intelligence feeds. Our analysis is centered on objective, externally verifiable information.

Start a free trial for full access

American Midstream Vendor Risk Report

This vendor risk report is based on UpGuard's continuous monitoring of American Midstream's security posture using open-source, commercial, and proprietary threat intelligence feeds. The results are summarized into a security rating based on the analysis of hundreds of individual checks across five risk categories: website security, email security, phishing & malware, brand & reputation risk, and network security.

Start a free trial for full access

Website Security

American Midstream

Server information header exposed

Exposing information about the server version increases the ability of attackers to exploit certain vulnerabilities. The website configuration should be changed to prevent version information being revealed in the 'server' header.

X-Frame-Options is not deny or sameorigin

Browsers may display this website's content in frames. This can lead to clickjacking attacks.

CSP is not implemented

No valid Content Security Policy is implemented. This increases the risk of XSS and clickjacking attacks.

X-Content-Type-Options is not nosniff

Browsers may interpret files as a different MIME type than what is specified in the Content-Type HTTP header. This can lead to MIME confusion attacks.

X-Powered-By header not exposed

Information about specific technology used on the server is obscured.

Referrer policy is not unsafe-url

The website's Referrer Policy is not configured to allow unsafe information to be sent in the referrer header.

ASP.NET version header not exposing specific ASP.net version

Ensuring the ASP.NET version header is not exposing a specific version makes it harder for attackers to exploit certain vulnerabilities.

ASP.NET version header not exposed

Ensuring the ASP.NET version header is not exposed makes it harder for attackers to exploit certain vulnerabilities.

No unmaintained page detected

The page appears to be maintained.

Start a free trial for full access

DNS

American Midstream

No subdomain takeover vulnerability detected

No dangling DNS records that could lead to subdomain takeover were detected.

Start a free trial for full access

Encryption

American Midstream

SSL not available

SSL is the standard encryption method for browsing websites. Enabling SSL requires installing an SSL certificate on the site.

HTTP does not redirect to HTTPS

The domain is still accessible over HTTP. All HTTP requests should be redirected to HTTPS.

HTTP Strict Transport Security (HSTS) not enforced

Without HSTS enforced, people browsing this site are more susceptible to man-in-the-middle attacks. The server should be configured to support HSTS.

Certificate not found on our revoked certificate list

The site's certificate chain was checked against our list of revoked certificates.

Hostname matches SSL certificate

The site's hostname matches the SSL certificate.

SSL has not expired

SSL certificate has not expired.

Trusted SSL certificate

The certificate presented by this domain was issued by a trusted certificate authority.

No insecure SSL/TLS versions available

No insecure SSL/TLS versions are available for this site.

SSL certificate chain present in server response

A complete SSL certificate chain was presented by the server for this domain.

SSL chain certificates do not expire within 20 days

SSL intermediate and root certificates do not expire within 20 days.

SSL expiration period shorter than 398 days

The SSL certificate presented by the server has an expiration period shorter than 398 days.

SSL has more than 20% of its valid period remaining

SSL certificate does not expire in less than 20% of its total valid period.

Strong SSL algorithm

Industry standard SHA-256 encryption in use.

Strong public certificate key length

The site's public certificate provides at least 112 bits of security strength.

Start a free trial for full access

Data leakage

American Midstream

No open cloud storage service detected

No cloud storage service configured to allow anonymous file listing was detected.

Domain index is not a listable directory

The domain index is not a listable directory.

Start a free trial for full access

IP/Domain Reputation

American Midstream

Not a suspected malware provider

This website does not appear to contain malicious code.

Not suspected of unwanted software

This website does not appear to be attempting to install unwanted software.

Not a suspected phishing page

This site does not appear to be a forgery or imitation of another website.

Start a free trial for full access

Vulnerability Management

American Midstream

Not vulnerable to CVE-2014-0160 (Heartbleed)

A bug in OpenSSL's implementation of the TLS heartbeat extension allows access to portions of memory on the targeted host e.g. cryptographic keys and passwords.

Not vulnerable to CVE-2014-3566 (POODLE)

The server does not support SSLv3, and is not vulnerable to the POODLE attack.

Not vulnerable to CVE-2015-0204 (FREAK)

The server does not offer RSA_EXPORT cipher suites, so clients are not vulnerable to the FREAK attack.

Not vulnerable to CVE-2015-4000 (Logjam)

The server is using strong Diffie-Hellman parameters and is not vulnerable to the Logjam attack.

Start a free trial for full access

How secure is your organization?

Request a free cybersecurity report to discover key risks on your website, email, network, and brand.

Instant insights you can act on immediately

Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities

American Midstream Security Rating

Company info

American Midstream Vendor Risk Report

Website Security

Server information header exposed

X-Frame-Options is not deny or sameorigin

CSP is not implemented

X-Content-Type-Options is not nosniff

X-Powered-By header not exposed

Referrer policy is not unsafe-url

ASP.NET version header not exposing specific ASP.net version

ASP.NET version header not exposed

No unmaintained page detected

DNS

No subdomain takeover vulnerability detected

Encryption

SSL not available

HTTP does not redirect to HTTPS

HTTP Strict Transport Security (HSTS) not enforced

Certificate not found on our revoked certificate list

Hostname matches SSL certificate

SSL has not expired

Trusted SSL certificate

No insecure SSL/TLS versions available

SSL certificate chain present in server response

SSL chain certificates do not expire within 20 days

SSL expiration period shorter than 398 days

SSL has more than 20% of its valid period remaining

Strong SSL algorithm

Strong public certificate key length

Data leakage

No open cloud storage service detected

Domain index is not a listable directory

IP/Domain Reputation

Not a suspected malware provider

Not suspected of unwanted software

Not a suspected phishing page

Vulnerability Management

Not vulnerable to CVE-2014-0160 (Heartbleed)

Not vulnerable to CVE-2014-3566 (POODLE)

Not vulnerable to CVE-2015-0204 (FREAK)

Not vulnerable to CVE-2015-4000 (Logjam)

Security reports related to American Midstream

HP

LinkedIn

Ticketmaster

Fortnite

Alphabet

Adobe

Cybersecurity & Risk Management Library

Breaches

Third-party risk management

Attack Surface Management

Cybersecurity

How secure is your organization?