{"id":74,"date":"2026-09-30T17:39:25","date_gmt":"2026-09-30T14:39:25","guid":{"rendered":"https:\/\/secradar.net\/blog\/domain-guvenlik-karnesi-nedir\/"},"modified":"2026-09-30T17:39:25","modified_gmt":"2026-09-30T14:39:25","slug":"domain-guvenlik-karnesi-nedir","status":"publish","type":"post","link":"https:\/\/secradar.net\/blog\/domain-guvenlik-karnesi-nedir\/","title":{"rendered":"Domain G\u00fcvenlik Karnesi: SSL, Ba\u015fl\u0131klar, E-posta ve DNS&#8217;i 100 \u00dczerinden Puanlay\u0131n"},"content":{"rendered":"<p>Bir alan ad\u0131n\u0131n g\u00fcvenli\u011fi tek bir ba\u015fl\u0131\u011fa indirgenemez: sertifikan\u0131z kusursuz olabilir ama e-posta kay\u0131tlar\u0131n\u0131z sahtecili\u011fe a\u00e7\u0131ksa, ya da g\u00fcvenlik ba\u015fl\u0131klar\u0131n\u0131z eksikse tablo eksik kal\u0131r. <a href=\"\/guvenlik-karnesi\">Domain G\u00fcvenlik Karnesi<\/a>, d\u00f6rt ayr\u0131 denetimi tek sorguda birle\u015ftirip alan ad\u0131n\u0131za <strong>100 \u00fczerinden<\/strong> tek bir puan ve kar\u015f\u0131l\u0131k gelen harf notunu verir.<\/p>\n<h2>Karne Neyi \u00d6l\u00e7er?<\/h2>\n<p>D\u00f6rt kategori paralel olarak de\u011ferlendirilir:<\/p>\n<ul>\n<li><strong>SSL \/ TLS<\/strong> \u2014 sertifika ge\u00e7erlili\u011fi, zincir b\u00fct\u00fcnl\u00fc\u011f\u00fc, desteklenen TLS s\u00fcr\u00fcmleri ve zay\u0131f cipher&#8217;lar. Ayr\u0131nt\u0131: <a href=\"\/ssl-sorgulama\">SSL Sorgulama<\/a>.<\/li>\n<li><strong>HTTP G\u00fcvenlik Ba\u015fl\u0131klar\u0131<\/strong> \u2014 HSTS, CSP, X-Frame-Options, nosniff gibi ba\u015fl\u0131klar. Ayr\u0131nt\u0131: <a href=\"\/blog\/http-guvenlik-basliklari-rehberi\/\">HTTP G\u00fcvenlik Ba\u015fl\u0131klar\u0131 Rehberi<\/a>.<\/li>\n<li><strong>E-posta G\u00fcvenli\u011fi<\/strong> \u2014 SPF, DKIM, DMARC ve MTA-STS. Ayr\u0131nt\u0131: <a href=\"\/blog\/spf-dkim-dmarc-eposta-guvenligi\/\">SPF, DKIM, DMARC<\/a>.<\/li>\n<li><strong>DNS \/ DNSSEC<\/strong> \u2014 DNS yan\u0131tlar\u0131n\u0131n imzalan\u0131p imzalanmad\u0131\u011f\u0131. Ayr\u0131nt\u0131: <a href=\"\/blog\/dnssec-nedir-dns-guvenligi\/\">DNSSEC Nedir?<\/a>.<\/li>\n<\/ul>\n<h2>Puanlama Nas\u0131l \u00c7al\u0131\u015f\u0131r?<\/h2>\n<p>Her kategori, kendi bulgular\u0131na g\u00f6re 0\u2013100 aras\u0131 bir puan al\u0131r. Genel puan ise bu kategorilerin <strong>a\u011f\u0131rl\u0131kl\u0131 ortalamas\u0131d\u0131r<\/strong>:<\/p>\n<ul>\n<li>SSL \/ TLS \u2014 %35<\/li>\n<li>E-posta G\u00fcvenli\u011fi \u2014 %25<\/li>\n<li>G\u00fcvenlik Ba\u015fl\u0131klar\u0131 \u2014 %20<\/li>\n<li>DNS \/ DNSSEC \u2014 %20<\/li>\n<\/ul>\n<p>Ard\u0131ndan genel puan bir harf notuna \u00e7evrilir (\u00f6rn. 90+ = A, 80\u201389 = B, 70\u201379 = C\u2026).<\/p>\n<h3>Neden &#8220;En Zay\u0131f Halka&#8221; De\u011fil, A\u011f\u0131rl\u0131kl\u0131 Ortalama?<\/h3>\n<p>Basit yakla\u015f\u0131mlar genel notu &#8220;en zay\u0131f kategoriye&#8221; e\u015fitler. Ama bu adil de\u011fildir: SSL&#8217;i ve e-postas\u0131 kusursuz, yaln\u0131zca g\u00fcvenlik ba\u015fl\u0131klar\u0131 eksik bir banka ile her alanda vasat bir site ayn\u0131 notu al\u0131rd\u0131. A\u011f\u0131rl\u0131kl\u0131 ortalama, g\u00fc\u00e7l\u00fc oldu\u011funuz alanlar\u0131n hakk\u0131n\u0131 verir; tek bir eksik kategori toplam puan\u0131 orant\u0131l\u0131 bi\u00e7imde d\u00fc\u015f\u00fcr\u00fcr ama s\u0131f\u0131rlamaz. Ayr\u0131ca ayn\u0131 harf notundaki iki site bile (\u00f6rne\u011fin ikisi de B) farkl\u0131 say\u0131sal puanlar al\u0131r \u2014 b\u00f6ylece k\u0131yaslama ger\u00e7ek\u00e7i olur.<\/p>\n<h2>Puan\u0131n\u0131z\u0131 Nas\u0131l Y\u00fckseltirsiniz?<\/h2>\n<p>En s\u0131k rastlanan ve en h\u0131zl\u0131 d\u00fczeltilebilen eksikler:<\/p>\n<ul>\n<li><strong>G\u00fcvenlik ba\u015fl\u0131klar\u0131:<\/strong> Sunucuya HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy ve Permissions-Policy eklemek dakikalar s\u00fcrer ve puan\u0131 ciddi y\u00fckseltir.<\/li>\n<li><strong>E-posta:<\/strong> DMARC&#8217;\u0131 <code>p=none<\/code>&#8216;dan <code>quarantine<\/code> ya da <code>reject<\/code>&#8216;e ta\u015f\u0131mak hem g\u00fcvenli\u011fi hem puan\u0131 art\u0131r\u0131r.<\/li>\n<li><strong>DNS:<\/strong> Registrar\/DNS panelinizden DNSSEC&#8217;i etkinle\u015ftirmek DNS notunu y\u00fckseltir.<\/li>\n<li><strong>SSL\/TLS:<\/strong> Eski TLS 1.0\/1.1&#8217;i kapat\u0131p zinciri tamamlamak yeterli olur.<\/li>\n<\/ul>\n<h2>Tek Seferlik Test De\u011fil, S\u00fcrekli \u0130zleme<\/h2>\n<p>G\u00fcvenlik durumu statik de\u011fildir: sertifikalar dolar, DMARC gev\u015fetilir, yeni bir subdomain eklenir. Karne size anl\u0131k bir foto\u011fraf verir; ama as\u0131l de\u011fer, bu foto\u011fraf\u0131 s\u00fcrekli izlemektir. SecRadar \u00fcye panelinde alan ad\u0131n\u0131z\u0131 ekleyerek t\u00fcm kategorileri arka planda izleyebilir, bir \u015fey bozuldu\u011funda e-posta veya Telegram ile uyar\u0131 alabilirsiniz. Tek panelden izleme mant\u0131\u011f\u0131n\u0131 <a href=\"\/blog\/surekli-izleme-ssl-dns-whois-guvenlik-basliklari\/\">bu yaz\u0131da<\/a> ayr\u0131nt\u0131l\u0131 anlatm\u0131\u015ft\u0131k.<\/p>\n<p>Alan ad\u0131n\u0131z\u0131n g\u00fcncel karnesini g\u00f6rmek i\u00e7in <a href=\"\/guvenlik-karnesi\">Domain G\u00fcvenlik Karnesini<\/a> hemen \u00e7al\u0131\u015ft\u0131r\u0131n.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>SSL, g\u00fcvenlik ba\u015fl\u0131klar\u0131, e-posta ve DNS g\u00fcvenli\u011fini 100 \u00fczerinden a\u011f\u0131rl\u0131kl\u0131 puanlayan Domain G\u00fcvenlik Karnesi nedir, puan nas\u0131l y\u00fckseltilir?<\/p>\n","protected":false},"author":1,"featured_media":77,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[],"class_list":["post-74","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-guvenlik"],"_links":{"self":[{"href":"https:\/\/secradar.net\/blog\/wp-json\/wp\/v2\/posts\/74","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/secradar.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/secradar.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/secradar.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/secradar.net\/blog\/wp-json\/wp\/v2\/comments?post=74"}],"version-history":[{"count":0,"href":"https:\/\/secradar.net\/blog\/wp-json\/wp\/v2\/posts\/74\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/secradar.net\/blog\/wp-json\/wp\/v2\/media\/77"}],"wp:attachment":[{"href":"https:\/\/secradar.net\/blog\/wp-json\/wp\/v2\/media?parent=74"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/secradar.net\/blog\/wp-json\/wp\/v2\/categories?post=74"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/secradar.net\/blog\/wp-json\/wp\/v2\/tags?post=74"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}