Executive summary
vercel.com
Good shape, with a few gaps worth closing this quarter.
Full coverage: every applicable check was assessed.
2026-11-15 19:34 UTC
Useful for your IT provider or a colleague. Anyone with the link can view the report.
Track your progress
Fix the findings, then come back and rescan. Your scan history is saved in this browser so you can see exactly what improved.
Spoofing email from this domain is hard.
Traffic to the site is encrypted and the certificate is valid.
The site instructs browsers to block common attacks.
The domain's infrastructure works, but recommended hardening is missing.
Help someone else check their domain
Share this public report with a colleague. They can review the evidence and check their own domain.
What to do first
- 1.
Turn on DNS signing for your domain
Signing helps resolvers detect forged answers about your domain.
Who can fix it: Your domain registrar or DNS provider
How to verify after the fix
dig +short DS vercel.com
- 2.
Limit what scripts your pages are allowed to run
This adds one layer of protection against injected scripts.
Who can fix it: Your website developer or web host
How to verify after the fix
curl -sIL https://vercel.com/ | grep -i "Content-Security-Policy"
A starting point, not a security guarantee.
What this grade means
- Tested hostname
- vercel.com
- Website request
- GET https://vercel.com/
- Scan time
- 2026-11-15 19:34:35 UTC
- Grading method
- Version 2How grading works
- Unverified or excluded checks
- None. Every applicable check was assessed.
This is a snapshot of the public configuration checks listed in this report. It does not verify the site's owner, business legitimacy, application security, or absence of vulnerabilities. It is not a security certification.
Get the badge
Show the live grade for vercel.com in a README, docs or site footer. The badge links to the public report and refreshes every 24 hours.
Scan shown on this page: 2026-11-15 19:34:35 UTC. The badge may display a cached result for up to 24 hours. Open the linked report to check its scan time.
[](https://getmirror.online/report/vercel.com)<a href="https://getmirror.online/report/vercel.com"><img src="https://getmirror.online/badge/vercel.com.svg" alt="Domain Armor grade"></a>https://getmirror.online/badge/vercel.com.svgScan history
AI fix plan
Pick scans from this browser's history. The AI compares them, explains what changed and builds a prioritized, step-by-step plan.
Scans to analyze
0 of 6 selectedThe current scan is always included.
AI-generated from your scan results only. Review each step before applying it; nothing is sent to or changed on the domain.
Agent access & discovery signals
Optional and unscored — it never changes the grade. Reads up to three public files from this site (robots.txt, llms.txt and /.well-known/security.txt) and reuses the homepage headers already fetched. llms.txt is an emerging proposal, not an official standard. It is informational and does not affect the grade.
Technical detail
Click a check to see the public data, a verification command, a safe fix recommendation and documentation sources.
Email security
27/30Encryption & certificate
25/25Browser protections
25/30DNS infrastructure
8/15Public DNS records
| A | vercel.com | 64.239.109.65 64.239.123.129 |
| AAAA | vercel.com | — |
| MX | vercel.com | 1 aspmx.l.google.com 5 alt1.aspmx.l.google.com 5 alt2.aspmx.l.google.com 10 aspmx2.googlemail.com 10 aspmx3.googlemail.com |
| NS | vercel.com | ns1.vercel-dns.com ns2.vercel-dns.com |
| TXT | vercel.com | google-site-verification=J9NjkBE_oybWpa-OHAkV0VjSjIvIBMfp83tdsQCzxK8 v=spf1 include:_netblocks.google.com include:_netblocks2.google.com include:_netblocks3.google.com include:mktomail.com include:amazonses.com include:sendgrid.net include:_spf.salesforce.com include:spf.mtasv.net ~all doordash-verification=kA2ozHfLLU2lEpqQVmJO7DRKwZArKO ahrefs-site-verification_774361e47cac589ba5ff743f90399b1e5792980bd22f0f4c56bfb1eaf571a7e0 stripe-verification=8ff198a026ba2920fd8f4e45bcc499573d1a342596c6f0f18f3eae226bb8173a apple-domain-verification=80dYVZTf3bf7C8H5 ZOOM_verify_iAqiiWW1TdK-GwbJI7qn1g stripe-verification=923c7c6074dc94f4b22136b4236a1dc5433a3276b5fc981799771f781d7a6058 stripe-verification=69ef655819f74eb6f93f9f7388273112ee8c2439b35502785239d3bf076af574 MS=ms81951275 mixpanel-domain-verify=3069307c-7d73-4581-880a-1b61267d06cb C575019D1B SFMC-JchuOOQGseLonwnFdKq2xDV5UnqnvJRjMKyh7rwz loom-verification=5698251381 notion_verify_82^tYP%}6Q65dbszXu>V?@~stLe]Cm3Dmn8rqe7DZgT1m3o!+PyEbv+Jx04rb%v67BtbG> docusign=589bb007-2665-4084-b839-9874df0da0cf docusign=8a27eabb-2ba5-4820-a148-36b0ac9f592b h1-domain-verification=DmNbUeH65JZUKDLixLxWCEfvFiJcCP6sSR3ymQ3MamqmMN2K _saml-domain-challenge=1b4981f2-76a2-401f-8f09-a261a97099af whimsical=34ebc92242a47d7e9a6ae5f42f60ad80fccbf094 _visual-studio-marketplace-vercel.vercel.com:4fe5630e-b256-4d57-9e03-88abeab96b37 openai-domain-verification=dv-RrobMXwsu06yBo22YAOsZdxP stripe-verification=e6c56a2c1de7a8a001d69362c33e8ee39536606dae859f9e5fef982ecd102696 stripe-verification=D353787AECFE3E8DF14A07DF171A7A0529DB83B8D7CD0C5FD89A9C42A255E38E cursor-domain-verification-f3eygw=YMP9VK0KY2xhJrRKFMpkkyhv1 _k57cawuboit4hp2k6rv5bjbxuvkznwp anthropic-domain-verification-08hmep=rIoWryrKgeXgTzXsASQqNA99q remote-domain-verification=8be9341d-2ab7-4de7-a26f-68c6af2b30ac box-domain-verification=968b9e475ce3f9a3bf3a2436eed2cd67082d8312f5e6559eaa7e1d1514fe03aa v=MCPv1; k=ed25519; p=53H31Wxaf08fBk8IOIjlWrxy4pK9KGrLRVSB8WSu8rY= serval-domain-verification-40ct5x=VbdjZnWHkRJwpBE0IwXuriy03 amp-by-sourcegraph-domain-verification-st5f9e=172nCAgVw3POSEMQGXOv24XWO plain-domain-verification-vkhaan=eY1PYorYjiTuIxRpcsIDKi19X carta-domain-verification-wnnawd=jFGjeToDS0JE6iRBOq79AjxaD gather-domain-verification=911fa583-4323-4bc7-9a43-a29ae4a6003e planet-scale-domain-verification-hx2k58=gjkMML1gwBAfWtiNyHI4qMBL1 |
| TXT | _dmarc.vercel.com | v=DMARC1; p=quarantine; rua=mailto:df9481016e14030@rep.dmarcanalyzer.com; ruf=mailto:df9481016e14030@for.dmarcanalyzer.com; pct=100; fo=1; |
| CAA | vercel.com | 0 issue "letsencrypt.org" 0 issue "globalsign.com" 0 issue "sectigo.com" 0 issue "pki.goog" |
| DS | vercel.com | — |