C78/100

Executive summary

auth0.com

Moderate exposure. There are gaps an attacker could exploit — fix them soon.

Full coverage: every applicable check was assessed.

2026-11-15 19:34 UTC

Print report / PDF

Useful for your IT provider or a colleague. Anyone with the link can view the report.

Track your progress

Fix the findings, then come back and rescan. Your scan history is saved in this browser so you can see exactly what improved.

Help someone else check their domain

Share this public report with a colleague. They can review the evidence and check their own domain.

What to do first

  1. 1.

    Turn on DNS signing for your domain

    Signing helps resolvers detect forged answers about your domain.

    Who can fix it: Your domain registrar or DNS provider

    How to verify after the fix

    dig +short DS auth0.com
  2. 2.

    Choose which companies may issue certificates for your domain

    This reduces the chance of a certificate being issued by a provider you did not choose.

    Who can fix it: Your domain registrar or DNS provider

    How to verify after the fix

    dig +short CAA auth0.com

A starting point, not a security guarantee.

What this grade means

Tested hostname
auth0.com
Website request
GET https://auth0.com/
Scan time
2026-11-15 19:34:34 UTC
Grading method
Version 2How grading works
Unverified or excluded checks
None. Every applicable check was assessed.

This is a snapshot of the public configuration checks listed in this report. It does not verify the site's owner, business legitimacy, application security, or absence of vulnerabilities. It is not a security certification.

Get the badge

Domain Armor grade

Show the live grade for auth0.com in a README, docs or site footer. The badge links to the public report and refreshes every 24 hours.

Scan shown on this page: ⁦2026-11-15 19:34:34 UTC⁩. The badge may display a cached result for up to 24 hours. Open the linked report to check its scan time.

Markdown
[![Domain Armor grade](https://getmirror.online/badge/auth0.com.svg)](https://getmirror.online/report/auth0.com)
HTML
<a href="https://getmirror.online/report/auth0.com"><img src="https://getmirror.online/badge/auth0.com.svg" alt="Domain Armor grade"></a>
Badge URL
https://getmirror.online/badge/auth0.com.svg

Scan history

AI fix plan

Pick scans from this browser's history. The AI compares them, explains what changed and builds a prioritized, step-by-step plan.

Scans to analyze

0 of 6 selected

The current scan is always included.

AI-generated from your scan results only. Review each step before applying it; nothing is sent to or changed on the domain.

Agent access & discovery signals

Optional and unscored — it never changes the grade. Reads up to three public files from this site (robots.txt, llms.txt and /.well-known/security.txt) and reuses the homepage headers already fetched. llms.txt is an emerging proposal, not an official standard. It is informational and does not affect the grade.

Technical detail

Click a check to see the public data, a verification command, a safe fix recommendation and documentation sources.

Email security

28/30

Encryption & certificate

25/25

Browser protections

22/30

DNS infrastructure

3/15

Public DNS records

Aauth0.com
172.64.150.238
104.18.37.18
AAAAauth0.com
2a06:98c1:310b::6812:2512
2606:4700:4407::ac40:96ee
MXauth0.com
10 mxa-00553301.gslb.pphosted.com
10 mxb-00553301.gslb.pphosted.com
NSauth0.com
ns-1033.awsdns-01.org
ns-1936.awsdns-50.co.uk
ns-344.awsdns-43.com
ns-604.awsdns-11.net
TXTauth0.com
MS=ms59194513
adobe-idp-site-verification=2ec548128df4fbccb40fa3bd89255013f93dd4e820ccf7827e13a848b9852c68
apple-domain-verification=R8abEXzqodj1WhoR
atlassian-domain-verification=Zwms6wYibNl10yHl8rJaGNFzJq96MUSWCIbyNg1WuDMgusi9fbuJanqeCKADWjBf
atlassian-domain-verification=l+qyT57o2RRiPzd8OoFmKyYQwak0zooBv8cvGyY0cYJY4U1eWOVCY4RxSzoJlLws
browserstack-domain-verification=177928a5-5243-4000-8f1d-70f8cc190f89
bugcrowd-verification=0c5422b6d5fc998dd934361620b97993
cloudbees-domain-verification=98a9b45129adb6e8036d956adda9e86db90e40c5
d2a8o3jtx3i5xv.cloudfront.net
drift-domain-verification=2d529019a29b7f2f58bd59a41a0abdde872c80cf584e20d1b58cfb628af61b8e
google-site-verification=7wgY2mcAyS67VorHGL-rIMc4Gy7Hd1tOrRcfBgegdeg
google-site-verification=QD7mK1DSeZAG1v6_cSyKGWw07CA7Eo4SxKaeNP8eii0
google-site-verification=ZcKBdDakQVqk80uRRuO9wsKLpBUcZ1ipNaaPliTQKjg
google-site-verification=t_TqvyQaU_8mENXuC5DKXhWHDJfXkf2TYeCoU1gZFVc
heroku-domain-verification=wy6s0kho27b7wwx0mqqypotojzwpxhvogdcrbl24uno
intacct-esk=4FED1A517BA8769BE0538C06A8C0589E
miro-verification=7e1b949aa782998962514b4867a2c78156c8e5bb
mongodb-site-verification=L4rNn1yNZmY392AVsc3S24hHtIqIyIU0
mongodb-site-verification=Ps4fCFZFa6dUCH1KJMwrl3oumaCE0Jel
mongodb-site-verification=u6v5K7NNHrlBXhkD6oA9d6cD5TeAldfK
onetrust-domain-verification=7b3d00b1e32140bb929f2a21735bae16
smartsheet-site-validation=LsLbY5NwoKd2avlrxMVVDPRxQ_1EXRtm
stripe-verification=16883763b763e1f186f8b457a62e6e8c8e271097d3039e4c61311b5a1857251f
stripe-verification=a586899fe9532223a9a3a3405f7f99d9e1286b8cf116a9c412d644708f1a104e
v=MCPv1; k=ed25519; p=OAH+eQVEJoO1vwtnhyUBqWF628IBkf/8GTsF8ah5+/4=
v=spf1 include:spf.mandrillapp.com include:amazonses.com include:_spf.intacct.com include:mktomail.com ip4:74.125.0.0/16 ip4:209.85.128.0/17 ip6:2001:4860:4864::/56 ip6:2404:6800:4864::/56 ip6:2607:f8b0:4864::/56 ip6:2800:3f0:4864::/56 ip6:2a00:1450:4864::/56 ip6:2c0f:fb50:4864::/56 exists:%{i}._spf.mta.salesforce.com ip4:205.220.176.21 ip4:205.220.164.21 ip4:168.245.48.84 ip4:168.245.73.252 ip4:50.31.57.204 ip4:198.21.5.209 ip4:167.89.21.169 ip4:167.89.14.31 ip4:167.89.126.180 ip4:167.89.110.192 ip4:208.185.229.0/24 ip4:208.185.235.0/24 ip4:148.59.108.0/23 ip4:148.59.106.0/23 ip4:159.183.193.109 ip4:159.183.213.105 ip4:159.183.213.107 ip4:159.183.214.96 ip4:159.183.213.204 ip4:159.183.200.101 ip4:149.72.233.170 ip4:149.72.90.103 ip4:192.254.124.136 ip4:198.37.159.181 ip4:167.89.51.134 ip4:192.174.90.242 ip4:159.183.191.229 -all
TXT_dmarc.auth0.com
v=DMARC1; p=quarantine; pct=100; rua=mailto:dmarc@okta.com; sp=quarantine; fo=1;
CAAauth0.com—
DSauth0.com—