Automated public DNS and web checks; results may be incomplete. These are passive observations, not an assessment of the organization.
Executive summary
netlify.com
Moderate exposure. There are gaps an attacker could exploit — fix them soon.
Full coverage: every applicable check was assessed.
2026-11-15 18:19 UTC
Useful for your IT provider or a colleague. Anyone with the link can view the report.
Track your progress
Fix the findings, then come back and rescan. Your scan history is saved in this browser so you can see exactly what improved.
Spoofing email from this domain is hard.
Traffic to the site is encrypted and the certificate is valid.
Several browser hardening headers are missing, which removes layers of protection against script injection and framing.
The domain's infrastructure works, but recommended hardening is missing.
Help someone else check their domain
Share this public report with a colleague. They can review the evidence and check their own domain.
What to do first
- 1.
Limit what scripts your pages are allowed to run
This adds one layer of protection against injected scripts.
Who can fix it: Your website developer or web host
How to verify after the fix
curl -sIL https://netlify.com/ | grep -i "Content-Security-Policy"
- 2.
Turn on DNS signing for your domain
Signing helps resolvers detect forged answers about your domain.
Who can fix it: Your domain registrar or DNS provider
How to verify after the fix
dig +short DS netlify.com
A starting point, not a security guarantee.
What this grade means
- Tested hostname
- netlify.com
- Website request
- GET https://netlify.com/ → https://www.netlify.com/
- Scan time
- 2026-11-15 18:19:53 UTC
- Grading method
- Version 2How grading works
- Unverified or excluded checks
- None. Every applicable check was assessed.
This is a snapshot of the public configuration checks listed in this report. It does not verify the site's owner, business legitimacy, application security, or absence of vulnerabilities. It is not a security certification.
Get the badge
Show the live grade for netlify.com in a README, docs or site footer. The badge links to the public report and refreshes every 24 hours.
Scan shown on this page: 2026-11-15 18:19:53 UTC. The badge may display a cached result for up to 24 hours. Open the linked report to check its scan time.
[](https://getmirror.online/report/netlify.com)<a href="https://getmirror.online/report/netlify.com"><img src="https://getmirror.online/badge/netlify.com.svg" alt="Domain Armor grade"></a>https://getmirror.online/badge/netlify.com.svgScan history
AI fix plan
Pick scans from this browser's history. The AI compares them, explains what changed and builds a prioritized, step-by-step plan.
Scans to analyze
0 of 6 selectedThe current scan is always included.
AI-generated from your scan results only. Review each step before applying it; nothing is sent to or changed on the domain.
Technical detail
Click a check to see the public data, a verification command, a safe fix recommendation and documentation sources.
Email security
30/30Encryption & certificate
25/25Browser protections
10/30DNS infrastructure
8/15Public DNS records
| A | netlify.com | 3.33.186.135 15.197.167.90 |
| AAAA | netlify.com | 2600:1f1c:446:4900::1f6 2600:1f1c:446:4900::1f5 |
| MX | netlify.com | 5 alt1.aspmx.l.google.com 1 aspmx.l.google.com 5 alt2.aspmx.l.google.com 10 aspmx2.googlemail.com 10 aspmx3.googlemail.com |
| NS | netlify.com | dns1.p04.nsone.net dns2.p04.nsone.net dns3.p04.nsone.net dns4.p04.nsone.net ns01.netlifydns.com ns02.netlifydns.com ns03.netlifydns.com ns04.netlifydns.com |
| TXT | netlify.com | v=spf1 include:_spf.google.com include:amazonses.com include:7477936.spf06.hubspotemail.net -all google-site-verification=QJq3jDnGiG6osO6RJ84O-hwoEze6PAz8lO6xFgfYBO0 google-site-verification=wYMhUQYu8qD8poMUBs5t2939EFiLwZQnzbjWKd1MU34 3B1992ABDE h1-domain-verification=CKczCcu1TomJ5Jw2dixrsuWKyY66Kv5zwEHCLhydMRNbQhmp google-site-verification=7OuPqnxzGdTqIMmu4O6_UGXAyBS18OsJnmZN_85-WuQ hcp-domain-verification=253416eabde8d62ebb0942cf662d24a8833dcfe01c6a99069d487a5dd9cf0799 miro-verification=518375d1204646621e56a0e29af14be2f0c4715c drift-domain-verification=e3a38bbc6796103d91cb92c4dd90b8804639590f53fd392f0cabce868084da2a wiz-domain-verification=2f8d51da2e10c15a2572601c95c47b85ed170b92b02154e33d9b041449a80646 _cx0tigevvwdrdef0r98rdaaf2hvtk6z MS=ms55290772 segment-site-verification=tQgMSMYZ00wjs1LdKMxuTCohG4KbwDlt cloudhealth=d5131546-fa1d-46b9-bdba-c16f54ac7e69 google-site-verification=G4JqDTXMHpDyWoqIRwgw8PBqg-AncXqtdkHehcOR7kc stripe-verification=9D1C1530F1369B534DF4FBD5E59F7F001D819593D423960E10057937D35D4186 linear-domain-verification=7ex7p22huwww openai-domain-verification=dv-BW9MtUvA6FaPTiNecdz6eful google-site-verification=zFZKxhW9F5SqX-7r11wMoqloxuhsIashrGHSVrRA4jw spacelift-domain-verification=9fuisfs hubspot-domain-verification=NzgyMzczZTEtNWYxYi00YTg0LThiZGItMmUxMTg4ZjI5YThl MS=ms47723390 openai-domain-verification=dv-MhwcRZa075RmqeHB80JuxtuE google-site-verification=VstUa2dACr9G9eIqBIzY8OsP_QxqyzQi8Kkf_b4SEVg google-site-verification=RKT_skMbvGWA7p-t54tEBkEAfCT23V2ME1qAgv-rqI8 google-site-verification=KBmq_v_BrKl2SYhxH1E37BqY5h3GaanKGaWhHDMUx7I notion-domain-verification=sb764uQHr86jHwIaCldeSpOBFHQWYBRsxCfTmgxWI5G ps-cd-verification=0762074c-74c5-46df-b787-97bfea25d218 anthropic-domain-verification-w17t12=kSbLxtJwwt3y05EWJEAQUKcJo |
| TXT | _dmarc.netlify.com | v=DMARC1; p=reject; rua=mailto:fexahwip@ag.dmarcian.com; ruf=mailto:fexahwip@fr.dmarcian.com; fo=1 |
| CAA | netlify.com | 128 issue "digicert.com;account=2d83e9ac9b6776c3f215150f6ebceea8cefe3bc2e1fb5efffb1d71e200575226" 128 issue "amazon.com" 128 iodef "mailto:security@netlify.com" |
| DS | netlify.com | — |