Automatic security check · Public OSINT only
Scanned URL
vercel.com security check
Public OSINT valuation for vercel.com: grade B (79/100). Title signal “Agentic Infrastructure - Vercel”. 5 security headers present, 3 commonly expected headers missing. This is a defensive surface review — not a penetration test.
79
/100
Grade B
- High concern
- Elevated risk
- Caution advised
- Trusted — verify
- Strong protections
How we scored vercel.com
Positive signals
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Content-Security-Policy observed.
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
- robots.txt is publicly available.
- RDAP domain record available (vercel.com).
Risk signals
- Set-Cookie present but Secure/HttpOnly incomplete on sampled header.
- X-Powered-By disclosed: Next.js, Payload.
Findings
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Content-Security-Policy observed.
- Set-Cookie present but Secure/HttpOnly incomplete on sampled header.
- X-Powered-By disclosed: Next.js, Payload.
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
- robots.txt is publicly available.
- RDAP domain record available (vercel.com).
- Final HTTP status 200 at https://vercel.com/.
Technical details
DNS
resolved- A
- 64.239.109.129, 64.239.123.193
- AAAA
- —
- PTR
- —
- error
- —
TLS / certificate
ok- version
- TLSv1.3
- cipher
- TLS_AES_128_GCM_SHA256
- issuer
- Let's Encrypt
- notAfter
- Dec 24 12:18:21 2026 GMT
- SAN sample
- *.vercel.com, vercel.com
- error
- —
HTTP & security headers
5 present- finalUrl
- https://vercel.com/
- status
- 200
- server
- Vercel
- x-powered-by
- Next.js, Payload
- present
- content-security-policy, referrer-policy, strict-transport-security, x-content-type-options, x-frame-options
- missing
- permissions-policy, cross-origin-opener-policy, cross-origin-resource-policy
- cookie Secure
- True
- cookie HttpOnly
- False
Tech fingerprint (public)
passive- title
- Agentic Infrastructure - Vercel
- generator
- —
- tech
- React, Next.js
- script hosts
- x
- description
- The autonomous stack for every app and agent.
RDAP / registration
rdap- domain
- vercel.com
- registrar
- Amazon Registrar, Inc.
- created
- 1999-10-04T19:30:47Z
- expires
- 2029-10-04T19:30:47Z
- nameservers
- a.zeit-world.co.uk, b.zeit-world.org, e.zeit-world.com, f.zeit-world.net
- status
- client transfer prohibited
- error
- —
Public well-known
passive- /.well-known/security.txt
- HTTP 200 · found
- /robots.txt
- HTTP 200 · found
- /security.txt
- HTTP 200 · found