Verisite checked citymapper.com on August 23, 2026 and gave it a trust score of 59/100. Out of 118 checks, 58 passed, with 38 warning(s) and 22 failed check(s).
Trust Score
Insufficient
Score incl. subdomains: 73/100
News
Citymapper.com has insufficient trustworthiness. This indicates that important criteria do not meet the required standards for online safety and privacy.
Citymapper is the ultimate transport app available on iPhone, Android, and the web, helping users navigate cities more effectively.
Checks HTTP security headers and cookie security configuration.
Checks for exposed sensitive files, directory listings, and information disclosure.
Scans page content for suspicious scripts, iframes, external forms, and cryptominers.
Verifies the SSL/TLS certificate validity and configuration.
Checks the age of the domain registration. Very young domains are often associated with fraud.
Checks for tracking cookies, consent mechanisms, and third-party trackers.
Checks for chamber of commerce number, VAT number, contact details, and required legal pages.
Checks external reviews (Trustpilot) and trust seals (Kiyoh, WebwinkelKeur).
Checks if the domain appears on known fraud or phishing lists.
Detects CMS, frameworks, and JavaScript libraries and checks for outdated versions.
Analyzes SPF, DKIM and DMARC configuration for email authentication.
Checks open ports, HTTP protocol support, redirect chain, and mixed content.
Checks DNS records, server information and hosting details.
Checks HTTP security headers and cookie security configuration.
Detects CMS, frameworks, and JavaScript libraries and checks for outdated versions.
Checks for exposed sensitive files, directory listings, and information disclosure.
Analyzes SPF, DKIM and DMARC configuration for email authentication.
Checks the age of the domain registration. Very young domains are often associated with fraud.
Checks for tracking cookies, consent mechanisms, and third-party trackers.
Checks open ports, HTTP protocol support, redirect chain, and mixed content.
Scans page content for suspicious scripts, iframes, external forms, and cryptominers.
Checks for chamber of commerce number, VAT number, contact details, and required legal pages.
Checks external reviews (Trustpilot) and trust seals (Kiyoh, WebwinkelKeur).
Checks if the domain appears on known fraud or phishing lists.
Verifies the SSL/TLS certificate validity and configuration.
Checks DNS records, server information and hosting details.
Citymapper is a popular transport app that assists users in navigating cities. The app is available on various platforms, including iPhone, Android, and the web. With Citymapper, users can easily plan routes and access public transport information.
However, our check revealed several critical issues. The website has failed to meet essential security criteria, such as security headers and privacy policies. This poses risks for users who share their personal information.
The website has failed on security headers, which means there is a concrete risk for users. This can lead to vulnerabilities that may be exploited by malicious actors. Additionally, there is no adequate privacy policy, creating uncertainty about how your data is handled. The reviews are also unreliable, indicating a lack of transparency or negative user experiences.
Verisite is an independent platform that conducts automated checks on websites. This result means that visitors to Citymapper.com should be cautious when sharing personal information due to inadequate security and privacy measures. For the company itself, this insufficient trustworthiness may lead to a decline in user trust and potentially harm its reputation.
