Automatic security check · Public OSINT only
Company website
app.netlify.com security check
Public OSINT valuation for app.netlify.com: grade A (86/100). Title signal “Netlify”. 5 security headers present, 3 commonly expected headers missing. This is a defensive surface review — not a penetration test.
86
/100
Grade A
- High concern
- Elevated risk
- Caution advised
- Trusted — verify
- Strong protections
Company website · Services · Social
Company website
Services & products
- No service or product links found on the scanned pages.
Social & LinkedIn
- No social or LinkedIn company links found on the scanned pages.
Links are extracted from public crawl HTML only. We never invent profiles or product pages.
How we scored app.netlify.com
Positive signals
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Content-Security-Policy observed.
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
- robots.txt is publicly available.
- RDAP domain record available (netlify.com).
Risk signals
- No elevated risk signals recorded in this pass.
Findings
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Content-Security-Policy observed.
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
- robots.txt is publicly available.
- RDAP domain record available (netlify.com).
- Final HTTP status 200 at https://app.netlify.com/.
Technical details
DNS
resolved- A
- 15.197.167.90, 3.33.186.135
- AAAA
- —
- PTR
- afa7f374f51cc8991.awsglobalaccelerator.com
- error
- —
TLS / certificate
ok- version
- TLSv1.3
- cipher
- TLS_AES_128_GCM_SHA256
- issuer
- DigiCert Inc
- notAfter
- Feb 5 23:59:59 2027 GMT
- SAN sample
- netlify.com, bitballoon.com, netlifyglobalcdn.com, *.netlify.com, *.bitballoon.com, *.netlifyglobalcdn.com
- error
- —
HTTP & security headers
5 present- finalUrl
- https://app.netlify.com/
- status
- 200
- server
- Netlify
- x-powered-by
- —
- present
- content-security-policy, referrer-policy, strict-transport-security, x-content-type-options, x-frame-options
- missing
- permissions-policy, cross-origin-opener-policy, cross-origin-resource-policy
- cookie Secure
- False
- cookie HttpOnly
- False
Tech fingerprint (public)
passive- title
- Netlify
- generator
- —
- tech
- React
- script hosts
- www.google.com, x
- description
- Create with AI or code, deploy instantly on production infrastructure. One platform to build and ship.
RDAP / registration
rdap- domain
- netlify.com
- registrar
- Name.com, Inc.
- created
- 2014-06-09T19:55:48Z
- expires
- 2032-06-09T19:55:48Z
- nameservers
- dns1.p04.nsone.net, dns2.p04.nsone.net, dns3.p04.nsone.net, dns4.p04.nsone.net, ns01.netlifydns.com, ns02.netlifydns.com, ns03.netlifydns.com, ns04.netlifydns.com
- status
- client transfer prohibited
- error
- —
Public well-known
passive- /.well-known/security.txt
- HTTP 200 · found
- /robots.txt
- HTTP 200 · found
- /security.txt
- HTTP 200 · found