Automatic security check · Public OSINT only
Company website
sentry.io security check
Public OSINT valuation for sentry.io: grade C (58/100). Title signal “Application Performance Monitoring & Error Tracking Software | Sentry”. 1 security headers present, 7 commonly expected headers missing. This is a defensive surface review — not a penetration test.
58
/100
Grade C
- High concern
- Elevated risk
- Caution advised
- Trusted — verify
- Strong protections
Company website · Services · Social
Company website
Services & products
- Error Monitoring
- Logs
- Seer NEW
- Agent
- Autofix
- AI Code Review
- Session Replay
- Metrics NEW
- Tracing
- Agent Tracing
- Profiling
- Size Analysis
- Cron Monitoring
- Uptime Monitoring
- Mobile Crash Reporting
- Game Crash Reporting
- AI Observability
- Application Performance Monitoring
- Application Observability
- Real User Monitoring
- Ecommerce
- OpenTelemetry
- Pricing
Links are extracted from public crawl HTML only. We never invent profiles or product pages.
How we scored sentry.io
Positive signals
- TLS handshake OK (TLSv1.3).
- Content-Security-Policy observed.
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
- robots.txt is publicly available.
- Final HTTP status 200 at https://sentry.io/welcome/.
Risk signals
- HSTS header missing on the final HTTPS response.
- X-Content-Type-Options missing.
Findings
- TLS handshake OK (TLSv1.3).
- HSTS header missing on the final HTTPS response.
- Content-Security-Policy observed.
- X-Content-Type-Options missing.
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
- robots.txt is publicly available.
- Final HTTP status 200 at https://sentry.io/welcome/.
Technical details
DNS
resolved- A
- 34.111.148.117, 34.8.226.60
- AAAA
- —
- PTR
- 117.148.111.34.bc.googleusercontent.com
- error
- —
TLS / certificate
ok- version
- TLSv1.3
- cipher
- TLS_AES_256_GCM_SHA384
- issuer
- DigiCert Inc
- notAfter
- Feb 20 23:59:59 2027 GMT
- SAN sample
- sentry.io, *.sentry.io
- error
- —
HTTP & security headers
1 present- finalUrl
- https://sentry.io/welcome/
- status
- 200
- server
- nginx
- x-powered-by
- —
- present
- content-security-policy
- missing
- strict-transport-security, x-content-type-options, x-frame-options, referrer-policy, permissions-policy, cross-origin-opener-policy, cross-origin-resource-policy
- cookie Secure
- False
- cookie HttpOnly
- False
Tech fingerprint (public)
passive- title
- Application Performance Monitoring & Error Tracking Software | Sentry
- generator
- —
- tech
- Cloudflare
- script hosts
- plausible.io, x
- description
- Application performance monitoring for developers & software teams to see errors clearer, solve issues faster & continue learning continuously. Get started at sentry.io.
RDAP / registration
unavailable- domain
- sentry.io
- registrar
- —
- created
- —
- expires
- —
- nameservers
- —
- status
- —
- error
- HTTP Error 404: Not Found
Public well-known
passive- /.well-known/security.txt
- HTTP 200 · found
- /robots.txt
- HTTP 200 · found
- /security.txt
- HTTP 200 · found