Is goodrx.com legit?
GoodRx.com appears to be a highly trustworthy platform for prescription savings. While there are a few minor technical points, its long-standing presence, strong security measures, and clear operational details inspire confidence, aligning with expectations for a well-established health service.
Health & Wellness average: 76/100 · based on 17 sites
Checked: April 18, 2026 at 8:09 AM UTC · Refresh
Is goodrx.com a scam? Here's what we found.
The site boasts a robust security posture with a valid SSL certificate from a reputable issuer, modern TLS 1.2 encryption, HSTS enforcement, and effective Content Security Policy and clickjacking protection. Google Web Risk also confirms no threats, indicating a secure browsing experience.
With a successful track record spanning nearly 15 years, GoodRx.com has a clearly established identity. The domain registration is transparent and well ahead of expiry, demonstrating long-term commitment.
GoodRx.com maintains a very strong reputation, evidenced by its high Tranco ranking suggesting significant traffic and recognition. While minor issues like missing structured data and a favicon exist, they don't detract significantly from its overall standing.
The presence of easily accessible contact information, along with comprehensive legal pages like privacy policies and terms of service, indicates a high level of transparency. The one social media link provides an additional avenue for engagement.
GoodRx.com clearly prioritizes user rights and legal obligations by making its Privacy Policy and Terms of Service readily available. This is crucial for any platform handling health-related information, ensuring users understand their data usage and site rules.
The site's infrastructure is generally solid, with proper DNS resolution and strong email authentication via SPF and DMARC. Minor issues like an unsigned DNSSEC and a misconfigured sitemap don't significantly impact its operational reliability.
Signals Detected
No structured data markup found
This is a well-known, high-traffic website
This business has no Trustpilot presence — not unusual for smaller or newer companies
robots.txt has 41 directives and references a sitemap
Domain created 2011-07-24T18:35:54Z (14 years, 11 months ago)
Registered through GoDaddy.com, LLC
Expires in 1193 days
DNSSEC status from WHOIS
crt.sh returned status 429
Valid certificate, expires in 266 days
Certificate issued by GlobalSign nv-sa
Connection uses TLS 1.2
Site enforces HTTPS via HSTS
Site has Content Security Policy configured
X-Frame-Options: SAMEORIGIN
Web server: AmazonS3
No threats detected by Google Web Risk
No favicon found — unusual for an established business
Not found on any DNS blacklists
Sitemap URL returns non-XML content
Website is live and responding
Website appears to have contact information
Website has both privacy policy and terms of service pages
Website links to one social media platform
Resolves to: 151.101.130.49, 151.101.2.49, 151.101.66.49, 151.101.194.49
Mail servers: aspmx.l.google.com., alt1.aspmx.l.google.com., alt2.aspmx.l.google.com., aspmx2.googlemail.com., aspmx3.googlemail.com.
Domain has SPF email authentication configured
Domain has DMARC email authentication configured
DNS providers: ns-594.awsdns-10.net., ns-1404.awsdns-47.org., ns-1770.awsdns-29.co.uk., ns-411.awsdns-51.com.
Could not query Wayback Machine
Average page load time
Embed This Badge
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.