rakuten-sec.co.jp

Readiness by lane

Green: rakuten-sec.co.jp. Thin bar: Stock & Crypto Trading peer median.

Priority fixes for rakuten-sec.co.jp

Ordered by impact and by how common each practice is among peers.

1. Priority 1 · Enable

   Mobile viewport configured

   Observed: The homepage had no viewport meta tag, so phones may render it zoomed out.

   Why it matters: Without it, phones render the page at desktop width and shrink it, which makes text tiny and hard to use.

   What to do: Add <meta name="viewport" content="width=device-width, initial-scale=1"> and check the layout on small screens.

   96% of Stock & Crypto Trading peers do this. Limit: Based on the homepage HTML delivered to an automated client; scripts that run later were not executed.

   Guide: Responsive Web Design Checklist for Real Devices

2. Priority 2 · Accelerate

   Static files cached for 30 days or more

   Observed: A same-site stylesheet or script was cacheable for 1 days, short of the 30-day benchmark.

   What to do: Give versioned (fingerprinted) CSS, JavaScript, fonts and images Cache-Control: public, max-age=31536000, immutable, and change the file name whenever the content changes.

   55% of Stock & Crypto Trading peers do this.

   Guide: Browser Caching Guide for Website Owners

3. Priority 3 · Accelerate

   Modern image formats in use

   Observed: The homepage had 98 images and none used WebP or AVIF.

   What to do: Serve WebP or AVIF with a JPEG or PNG fallback, either through an image CDN or by generating both formats at build time.

   48% of Stock & Crypto Trading peers do this.

   Guide: AVIF, WebP, JPEG, and PNG: Choose the Right Image Format

4. Priority 4 · Harden

   Framing restricted

   Observed: The homepage did not send frame-ancestors or X-Frame-Options, so other sites may frame it.

   What to do: Send Content-Security-Policy: frame-ancestors 'self' (or a list of trusted origins). X-Frame-Options: SAMEORIGIN covers older browsers.

   60% of Stock & Crypto Trading peers do this.

   Guide: A Practical Website Health Check for Owners

What rakuten-sec.co.jp already does well

Practices fewer than half of Stock & Crypto Trading peers use.

• Nameservers spread across providersNameservers spread across more than one operator.6.2% of peers
• security.txt publishedsecurity.txt with a contact found.9.1% of peers
• HSTS kept for at least a yearHSTS with a 365-day max-age.44% of peers

What we saw

Homepage checked

https://www.rakuten-sec.co.jp/

Homepage response

HTTP 200

TLS

TLSv1.3, HTTP/2

Certificate

DigiCert, 198-day validity, expiring 2026-12-04

DNS operators

3 self-run or other nameserver domains

HSTS

max-age 365 days

DMARC policy

p=reject

Homepage HTML

314 KB, gzip

Images on homepage

98 (png 89, svg 5, jpg 4)

Limits: homepage only, one location, one moment. Header checks reflect the homepage response; other pages may differ.

Stack and providers

Seen in the homepage response, certificate and DNS. Provider pages compare how their customers configure the same checks.

All 31 checks

Select a gap for the method and fix. How each check works

Compare with other Stock & Crypto Trading sites

• bolsamania.com64
• daryagold.com65
• moomoo.com65
• nikkei225jp.com65
• thefundedroom.com65

Stock & Crypto Trading readiness benchmark