Automatic security check · Public OSINT only
Scanned URL
redis.io security check
Public OSINT valuation for redis.io: grade B (70/100). Title signal “Redis - Real-time data for agents & apps”. 2 security headers present, 6 commonly expected headers missing. This is a defensive surface review — not a penetration test.
70
/100
Grade B
- High concern
- Elevated risk
- Caution advised
- Trusted — verify
- Strong protections
How we scored redis.io
Positive signals
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Content-Security-Policy observed.
- Set-Cookie includes Secure and HttpOnly flags.
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
Risk signals
- X-Content-Type-Options missing.
Findings
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Content-Security-Policy observed.
- X-Content-Type-Options missing.
- Set-Cookie includes Secure and HttpOnly flags.
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
- robots.txt is publicly available.
- Final HTTP status 200 at https://redis.io/.
Technical details
DNS
resolved- A
- 104.18.25.196
- AAAA
- —
- PTR
- —
- error
- —
TLS / certificate
ok- version
- TLSv1.3
- cipher
- TLS_AES_256_GCM_SHA384
- issuer
- Google Trust Services
- notAfter
- Dec 3 20:00:22 2026 GMT
- SAN sample
- redis.io, *.redis.io
- error
- —
HTTP & security headers
2 present- finalUrl
- https://redis.io/
- status
- 200
- server
- cloudflare
- x-powered-by
- —
- present
- content-security-policy, strict-transport-security
- missing
- x-content-type-options, x-frame-options, referrer-policy, permissions-policy, cross-origin-opener-policy, cross-origin-resource-policy
- cookie Secure
- True
- cookie HttpOnly
- True
Tech fingerprint (public)
passive- title
- Redis - Real-time data for agents & apps
- generator
- Redis
- tech
- Next.js, Google Analytics
- script hosts
- x
- description
- Developers love Redis. Unlock the full potential of the Redis database with Redis Enterprise and start building blazing fast apps.
RDAP / registration
unavailable- domain
- redis.io
- registrar
- —
- created
- —
- expires
- —
- nameservers
- —
- status
- —
- error
- HTTP Error 404: Not Found
Public well-known
passive- /.well-known/security.txt
- HTTP 200 · found
- /robots.txt
- HTTP 200 · found
- /security.txt
- HTTP 404