diff --git a/server.js b/server.js
index 95d21a2fd2..33e8136ea6 100644
--- a/server.js
+++ b/server.js
@@ -1297,7 +1297,10 @@ cache(function(data, match, sendBadge, request) {
     try {
       var data = JSON.parse(buffer);
       var status = data.status;
-      if (status === 'notsouptodate') {
+      if (status === 'insecure') {
+        badgeData.colorscheme = 'red';
+        status = 'insecure';
+      } else if (status === 'notsouptodate') {
         badgeData.colorscheme = 'yellow';
         status = 'up-to-date';
       } else if (status === 'outofdate') {