Automatic security check · Public OSINT only
Company website
hashicorp.com security check
Public OSINT valuation for hashicorp.com: grade D (51/100). Title signal “Vercel Security Checkpoint”. 0 security headers present, 8 commonly expected headers missing. This is a defensive surface review — not a penetration test.
51
/100
Grade D
- High concern
- Elevated risk
- Caution advised
- Trusted — verify
- Strong protections
Company website · Services · Social
Company website
Services & products
- No service or product links found on the scanned pages.
Social & LinkedIn
- No social or LinkedIn company links found on the scanned pages.
Links are extracted from public crawl HTML only. We never invent profiles or product pages.
How we scored hashicorp.com
Positive signals
- TLS handshake OK (TLSv1.3).
- DNS resolves publicly (A/AAAA).
- RDAP domain record available (hashicorp.com).
- Final HTTP status 429 at https://hashicorp.com/.
Risk signals
- HSTS header missing on the final HTTPS response.
- Content-Security-Policy not observed.
- X-Content-Type-Options missing.
Findings
- TLS handshake OK (TLSv1.3).
- HSTS header missing on the final HTTPS response.
- Content-Security-Policy not observed.
- X-Content-Type-Options missing.
- DNS resolves publicly (A/AAAA).
- RDAP domain record available (hashicorp.com).
- Final HTTP status 429 at https://hashicorp.com/.
Technical details
DNS
resolved- A
- 76.76.21.21
- AAAA
- —
- PTR
- —
- error
- —
TLS / certificate
ok- version
- TLSv1.3
- cipher
- TLS_AES_128_GCM_SHA256
- issuer
- Let's Encrypt
- notAfter
- Dec 22 11:01:18 2026 GMT
- SAN sample
- hashicorp.com
- error
- —
HTTP & security headers
0 present- finalUrl
- https://hashicorp.com/
- status
- 429
- server
- Vercel
- x-powered-by
- —
- present
- —
- missing
- strict-transport-security, content-security-policy, x-content-type-options, x-frame-options, referrer-policy, permissions-policy, cross-origin-opener-policy, cross-origin-resource-policy
- cookie Secure
- False
- cookie HttpOnly
- False
Tech fingerprint (public)
passive- title
- Vercel Security Checkpoint
- generator
- —
- tech
- —
- script hosts
- —
- description
- —
RDAP / registration
rdap- domain
- hashicorp.com
- registrar
- CSC Corporate Domains, Inc.
- created
- 2011-04-30T18:27:18Z
- expires
- 2028-04-30T18:27:18Z
- nameservers
- ns-1411.awsdns-48.org, ns-1753.awsdns-27.co.uk, ns-230.awsdns-28.com, ns-667.awsdns-19.net
- status
- client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited
- error
- —
Public well-known
passive- /.well-known/security.txt
- HTTP 429
- /robots.txt
- HTTP 429
- /security.txt
- HTTP 429