B+89%
Quality Score
2
Pages
1
Issues
8.0
Avg Confidence
8.0
Avg Priority
1 High
>_ Testers.AI
AI Analysis
Thrive Capital scored B+ (89%) with 1 issues, ranking #20 of 47 VC sites. That's 22 fewer than the 22.7 category average (98th percentile).
Top issues to fix immediately: "Email addresses exposed in footer without proper security consideratio" — Implement email obfuscation techniques such as: (1) Using a contact form instead of direct email links, (2) Using Jav....
Weakest area — content (2/10): The page contains minimal content beyond the company name and logo.
Quick wins: Add a comprehensive navigation menu with links to About, Services/Portfolio, Team, News, and Contact sections. Include a clear value proposition or tagline explaining Thrive Capital's mission and investment focus.
Qualitative Quality
Thrive Capital
Category Avg
Best in Category
Pages Tested · 2 screenshots
Homepage
www.thrivecap.com
Detected Issues · 1 total
1
Email addresses exposed in footer without proper security consideration
HIGH P8
Prompt to Fix
The issue is that email addresses are exposed in plain text in the footer, making them vulnerable to scraping and spam. Fix it by implementing email obfuscation, using a contact form instead of direct mailto links, or protecting the emails through JavaScript-based techniques.
Why it's a bug
Two email addresses (pr@thrivecap.com and info@thrivecap.com) are publicly displayed in plain text in the footer. This exposes contact information to automated email scraping, spam bots, and phishing attacks. Email addresses visible on public pages are commonly harvested for spam campaigns and social engineering attacks.
Why it might not be a bug
Email addresses are sometimes intentionally public for contact purposes, and this may be the organization's deliberate strategy. However, this still represents a security risk that should be mitigated.
Suggested Fix
Implement email obfuscation techniques such as: (1) Using a contact form instead of direct email links, (2) Using JavaScript-based email obfuscation to hide addresses from bots, (3) Displaying emails as images rather than clickable text, or (4) Using a dedicated contact form with CAPTCHA protection.
Why Fix
Protecting email addresses reduces the risk of spam, phishing campaigns, and targeted social engineering attacks against the organization and its employees.
Route To
Security Engineer / Frontend Developer
Page
Tester
Sharon · Security TesterTechnical Evidence
Elements:
<a href="mailto:pr@thrivecap.com">pr@thrivecap.com</a>
<a href="mailto:info@thrivecap.com">info@thrivecap.com</a>Page Text:
Media and comment requests: pr@thrivecap.com
General correspondence: info@thrivecap.com