Dimension scores are derived from public data and fields; weighted into the composite. Reference only.
joetiedeman.uk is Joe Tiedeman’s personal technology and security blog, not a traditional cybersecurity vendor website. The content shows that the author has long worked in technology, infrastructure, architecture, and security governance. He previously served as CIO of the UK’s Higher Education Statistics Agency and is currently Head of DevOps at Howden UK & Ireland Group. The blog covers topics such as web security, DNS, Microsoft 365/Entra, cloud infrastructure, and personal security advice, and frequently mentions his side project, Cybaa.
Based on the crawled content, the closest thing to a productized capability is the Cybaa Security Headers API. This API is positioned as an alternative for users affected by the planned shutdown of the securityheaders.com API in April 2026. It can scan a hostname or URL and return structured JSON results, including a score, HTTP response headers, and the number of passed/failed tests. Checks include CSP, Secure/HttpOnly/SameSite attributes for cookies, CORS, redirect behavior, Referrer-Policy, HSTS, SRI, X-Content-Type-Options, X-Frame-Options, and CORP. The article also says it is suitable for CI/CD checks, automated asset scanning, compliance evidence collection, and recurring audits.
The content does not provide clear pricing, plans, payment methods, SLA details, support channels, or compliance certifications for joetiedeman.uk or the Cybaa API. The article says that if the securityheaders.com site is no longer maintained, Cybaa already has its own version “available and free to use right now,” but this is not enough to determine its long-term free-use policy or enterprise pricing.
The strengths are professional content and highly specific scenarios, especially practical guidance around Microsoft Entra verified domains, expired Microsoft 365 domains, DNS Zone Files, email security, and HTTP security headers. The Cybaa API uses standard HTTPS calls and an Api-Key, making it easy to integrate into automation workflows. The downside is that currently disclosed information is limited: there are no customer cases, deployment architecture details, alerting mechanisms, permission management features, compliance certifications, or support service descriptions. joetiedeman.uk itself is more of a knowledge-sharing entry point than a complete product portal.
It is suitable for security engineers, DevOps teams, cloud platform administrators, SME IT teams, and automated scanning use cases that need an alternative to the SecurityHeaders API. If an organization needs a mature vulnerability management, WAF, attack surface management, or compliance audit platform, it should further evaluate the Cybaa website and the product’s actual capabilities.
The content does not mention access from mainland China, node deployment, or ICP filing information. The accessibility of joetiedeman.uk and api.cybaa.io from China cannot be confirmed from the text alone, so it is assessed as unknown.
⚠ This review is compiled from public sources and does not constitute a purchase recommendation. Verify all facts on the vendor's official site. Verify on joetiedeman.uk official site.
joetiedeman.uk is an United Kingdom Security provider. TG4G tracks its product information, an overall rating of 5.0/10, and a China-accessibility score of Workable. Click "Visit Official Site" to reach joetiedeman.uk directly.