Automatic security check · Public OSINT only
Company website
twilio.com security check
Public OSINT valuation for twilio.com: grade B (80/100). Title signal “Conversational AI and APIs for SMS, Email, Voice | Twilio”. 3 security headers present, 5 commonly expected headers missing. This is a defensive surface review — not a penetration test.
80
/100
Grade B
- High concern
- Elevated risk
- Caution advised
- Trusted — verify
- Strong protections
Company website · Services · Social
Company website
Services & products
- Support Plans
- Partner Solutions
- Twilio Platform An icon of a right chevron
- Conversations An icon of a right chevron
- Conversation Memory An icon of a right chevron
- Conversation Orchestrator An icon of a right chevron
- Conversation Intelligence An icon of a right chevron
- Conversation Relay An icon of a right chevron
- Email An icon of a right chevron
- SMTP Service
- Connections An icon of a right chevron
- Warehouses
- Protocols An icon of a right chevron
- Unify An icon of a right chevron
- Engage An icon of a right chevron
- Audiences
- Journeys
- See all products
- latest innovations
- SMS marketing
- AI agent productivity
- Data Engineering An icon of a right chevron
- Marketing An icon of a right chevron
- Product An icon of a right chevron
Social & LinkedIn
- No social or LinkedIn company links found on the scanned pages.
Links are extracted from public crawl HTML only. We never invent profiles or product pages.
How we scored twilio.com
Positive signals
- TLS handshake OK (TLSv1.2).
- HTTP Strict Transport Security is present.
- Set-Cookie includes Secure and HttpOnly flags.
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
- robots.txt is publicly available.
- RDAP domain record available (twilio.com).
Risk signals
- Content-Security-Policy not observed.
Findings
- TLS handshake OK (TLSv1.2).
- HTTP Strict Transport Security is present.
- Content-Security-Policy not observed.
- Set-Cookie includes Secure and HttpOnly flags.
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
- robots.txt is publicly available.
- RDAP domain record available (twilio.com).
- Final HTTP status 200 at https://www.twilio.com/en-us.
Technical details
DNS
resolved- A
- 35.168.222.240, 52.6.206.82, 44.199.52.48
- AAAA
- —
- PTR
- ec2-35-168-222-240.compute-1.amazonaws.com
- error
- —
TLS / certificate
ok- version
- TLSv1.2
- cipher
- ECDHE-RSA-AES128-GCM-SHA256
- issuer
- Amazon
- notAfter
- Jan 26 23:59:59 2027 GMT
- SAN sample
- *.twilio.com, *.internal.us1.twilio.com, *.twilio.org, *.au1.twilio.com, *.internal.ie1.twilio.com, *.internal.au1.twilio.com, *.internal.twilio.com, *.ie1.twilio.com
- error
- —
HTTP & security headers
3 present- finalUrl
- https://www.twilio.com/en-us
- status
- 200
- server
- —
- x-powered-by
- —
- present
- strict-transport-security, x-content-type-options, x-frame-options
- missing
- content-security-policy, referrer-policy, permissions-policy, cross-origin-opener-policy, cross-origin-resource-policy
- cookie Secure
- True
- cookie HttpOnly
- True
Tech fingerprint (public)
passive- title
- Conversational AI and APIs for SMS, Email, Voice | Twilio
- generator
- —
- tech
- Google Analytics
- script hosts
- rum.hlx.page, consent.trustarc.com, assets.adobedtm.com
- description
- Build amazing customer experiences on the Twilio platform with APIs for SMS, RCS, voice, and email, plus conversational AI for smarter engagement, and identity verification for trust.
RDAP / registration
rdap- domain
- twilio.com
- registrar
- MarkMonitor Inc.
- created
- 2007-10-26T22:26:18Z
- expires
- 2028-10-26T22:26:18Z
- nameservers
- ns-1188.awsdns-20.org, ns-1678.awsdns-17.co.uk, ns-85.awsdns-10.com, ns-960.awsdns-56.net
- status
- client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
- error
- —
Public well-known
passive- /.well-known/security.txt
- HTTP 404
- /robots.txt
- HTTP 200 · found
- /security.txt
- HTTP 200 · found