Liquary is a self-custodial trading and prediction-markets app: your keys stay with you. Below are independent checks of its security posture, each one publicly re-verifiable, none self-awarded.
Scanned by securityheaders.com (Snyk). All six protective headers are set: Content-Security-Policy, Strict-Transport-Security, X-Frame-Options, X-Content-Type-Options, Referrer-Policy and Permissions-Policy.
Scanned by ImmuniWeb's SSL Security Test: Grade A+. TLS 1.2 and 1.3 only, every supported cipher suite PCI DSS compliant, a fully trusted certificate chain, and hybrid ML-KEM post-quantum key exchange already enabled (the NIST-recommended transition setup).
Scanned by MDN's HTTP Observatory (Mozilla): 80/100, 11 of 12 tests passed. The one flagged item is the CSP 'unsafe-inline' allowance we keep deliberately for performance: documented, and compensated by a build-time security lint that blocks the code patterns it would expose.
Scanned by Sucuri SiteCheck (GoDaddy), rated Low Security Risk: no malware detected, and the domain is absent from all 9 blacklists the scanner monitors. A reputation check that complements the header scans: it attests the site serves nothing harmful and is flagged nowhere.
Checked against Google's Safe Browsing database (Transparency Report): no suspicious content detected. This is the database Chrome, Firefox and Safari all consult, so a clean status here means no browser warning stands between a visitor and the app.
Scanned by urlscan.io, which loads the page in a sandbox and records every request it makes, every IP and domain it contacts, and a screenshot of what it renders. Verdict: No classification, meaning none of its engines flags the app as malicious or phishing. The full scan is public, so a visitor can see for themselves what the app talks to.
Checked by VirusTotal (Google), which runs the URL past the engines and blocklists of dozens of security vendors at once: none flags it as malicious or suspicious. One lookup that aggregates the antivirus and anti-phishing verdicts a visitor would otherwise have to consult one by one.
SPF and DMARC are live on liquary.xyz with a quarantine policy applied to 100% of mail: a fraudulent email impersonating our domain lands in spam, not in your inbox. All five MXToolbox DMARC checks pass, and this protects users directly against the number-one crypto attack, phishing from a spoofed sender.
