Automatic security check · Public OSINT only
Company website
bitwarden.com security check
Public OSINT valuation for bitwarden.com: grade A (88/100). Title signal “Best Password Manager for Business, Enterprise & Personal | Bitwarden | Bitwarden”. 6 security headers present, 2 commonly expected headers missing. This is a defensive surface review — not a penetration test.
Strong protections
Public signals look solid. Keep verifying ownership and payment flows for high-stakes use. Passive OSINT only · inventKeys=false.
- High concern
- Elevated risk
- Caution advised
- Trusted — verify
- Strong protections
Company website · Services · Social
Company website
Services & products
- Pricing
- Teams and Businesses For small and growing organizations For small and growing
- Enterprise For security at enterprise scale For security at enterprise scale
- Secrets Manager For developers and DevOps teams For developers and DevOps team
- Access Intelligence Actionable view of vault security Actionable view of vault
- Agentic AI
- Public Sector
- Healthcare
- Financial Services
- IT/Saas
- Legal
- Marketing
- Explore Plans
- Individual Security for yourself Security for yourself
- Family A shared vault for six users A shared vault for six users
- Authenticator App Free 2FA, no account needed Free 2FA, no account needed
- Secure Sharing Files that disappear after viewing Files that disappear after vie
- Explore Plans
- Enterprise Services
Social & LinkedIn
- No social or LinkedIn company links found on the scanned pages.
Links are extracted from public crawl HTML only. We never invent profiles or product pages.
Research engines · Complete scan
This complete report delivers web-check-class passive modules to customers — DNS, TLS, headers, mail auth, archives, CT logs and more — researched in the spirit of Lissy93/web-check. Port scan, traceroute and Shodan stay off by policy. Run a live check on the security-check tool for the full interactive dashboard.
Connect this report to your website
Add a free badge that links visitors to this official Wordle security report. You get referral traffic and a backlink; customers can verify the dossier.
Trustpilot · Glassdoor
How we scored bitwarden.com
Positive signals
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Content-Security-Policy observed.
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
- robots.txt is publicly available.
- RDAP domain record available (bitwarden.com).
Risk signals
- No elevated risk signals recorded in this pass.
Findings
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Content-Security-Policy observed.
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
- robots.txt is publicly available.
- RDAP domain record available (bitwarden.com).
- Final HTTP status 200 at https://bitwarden.com/.
Technical details
DNS
resolved- A
- 151.101.1.91, 151.101.65.91, 151.101.129.91, 151.101.193.91
- AAAA
- —
- PTR
- —
- error
- —
TLS / certificate
ok- version
- TLSv1.3
- cipher
- TLS_AES_128_GCM_SHA256
- issuer
- Let's Encrypt
- notAfter
- Dec 6 03:18:08 2026 GMT
- SAN sample
- bitwarden.com
- error
- —
HTTP & security headers
6 present- finalUrl
- https://bitwarden.com/
- status
- 200
- server
- —
- x-powered-by
- —
- present
- content-security-policy, permissions-policy, referrer-policy, strict-transport-security, x-content-type-options, x-frame-options
- missing
- cross-origin-opener-policy, cross-origin-resource-policy
- cookie Secure
- False
- cookie HttpOnly
- False
Tech fingerprint (public)
passive- title
- Best Password Manager for Business, Enterprise & Personal | Bitwarden | Bitwarden
- generator
- —
- tech
- React, Google Analytics
- script hosts
- global.ketchcdn.com, bitwarden.com
- description
- Bitwarden is the trusted, open source password manager for individuals, teams, and enterprises. Securely store, share, and manage passwords, passkeys, and secrets. Free to start.
Company presence (crawl links)
extracted- companyWebsite
- https://bitwarden.com/
- serviceLinks
- none found
- socialLinks
- none found
RDAP / registration
rdap- domain
- bitwarden.com
- registrar
- Cloudflare, Inc.
- created
- 2015-11-16T14:28:08Z
- expires
- 2027-11-16T14:28:08Z
- nameservers
- igor.ns.cloudflare.com, rose.ns.cloudflare.com
- status
- client transfer prohibited
- error
- —
Public well-known
passive- /.well-known/security.txt
- HTTP 404
- /robots.txt
- HTTP 200 · found
- /security.txt
- HTTP 200 · found