Automatic security check · Public OSINT only
Company website
clickup.com security check
Public OSINT valuation for clickup.com: grade B (80/100). Title signal “ClickUp™ | Maximize productivity • Software, AI, and humans converge”. 4 security headers present, 4 commonly expected headers missing. This is a defensive surface review — not a penetration test.
Trusted — verify
No major public red flags in this pass, but confirm reviews, ownership, and TLS details yourself. Passive OSINT only · inventKeys=false.
- High concern
- Elevated risk
- Caution advised
- Trusted — verify
- Strong protections
Company website · Services · Social
Company website
Services & products
Social & LinkedIn
- No social or LinkedIn company links found on the scanned pages.
Links are extracted from public crawl HTML only. We never invent profiles or product pages.
Research engines · Complete scan
This complete report delivers web-check-class passive modules to customers — DNS, TLS, headers, mail auth, archives, CT logs and more — researched in the spirit of Lissy93/web-check. Port scan, traceroute and Shodan stay off by policy. Run a live check on the security-check tool for the full interactive dashboard.
Connect this report to your website
Add a free badge that links visitors to this official Wordle security report. You get referral traffic and a backlink; customers can verify the dossier.
Trustpilot · Glassdoor
How we scored clickup.com
Positive signals
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Content-Security-Policy observed.
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
- robots.txt is publicly available.
- RDAP domain record available (clickup.com).
Risk signals
- X-Content-Type-Options missing.
Findings
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Content-Security-Policy observed.
- X-Content-Type-Options missing.
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
- robots.txt is publicly available.
- RDAP domain record available (clickup.com).
- Final HTTP status 200 at https://clickup.com/.
Technical details
DNS
resolved- A
- 3.174.46.120, 3.174.46.2, 3.174.46.21, 3.174.46.35
- AAAA
- 2600:9000:28eb:9000:8:4496:4180:93a1, 2600:9000:28eb:d800:8:4496:4180:93a1, 2600:9000:28eb:d600:8:4496:4180:93a1, 2600:9000:28eb:7400:8:4496:4180:93a1, 2600:9000:28eb:dc00:8:4496:4180:93a1, 2600:9000:28eb:4000:8:4496:4180:93a1, 2600:9000:28eb:ea00:8:4496:4180:93a1, 2600:9000:28eb:7600:8:4496:4180:93a1
- PTR
- server-3-174-46-120.fra60.r.cloudfront.net
- error
- —
TLS / certificate
ok- version
- TLSv1.3
- cipher
- TLS_AES_128_GCM_SHA256
- issuer
- Amazon
- notAfter
- Mar 23 23:59:59 2027 GMT
- SAN sample
- *.clickup.com, clickup.com
- error
- —
HTTP & security headers
4 present- finalUrl
- https://clickup.com/
- status
- 200
- server
- AmazonS3
- x-powered-by
- —
- present
- content-security-policy, referrer-policy, strict-transport-security, x-frame-options
- missing
- x-content-type-options, permissions-policy, cross-origin-opener-policy, cross-origin-resource-policy
- cookie Secure
- False
- cookie HttpOnly
- False
Tech fingerprint (public)
passive- title
- ClickUp™ | Maximize productivity • Software, AI, and humans converge
- generator
- —
- tech
- Next.js, Google Analytics
- script hosts
- www.googletagmanager.com, cdn.cookielaw.org, cdn.jsdelivr.net, pages.clickup.com, x
- description
- Our mission is to make the world more productive. To do this, we built the everything app for work - Tasks, Docs, Goals, and Chat.
Company presence (crawl links)
extracted- companyWebsite
- https://clickup.com/
- serviceLinks
- Pricing: https://clickup.com/pricing, Enterprise: https://clickup.com/plans/enterprise, Projects: https://clickup.com/features/tasks, Time Tracking: https://clickup.com/features/project-time-tracking, Chat: https://clickup.com/features/chat, Calendar: https://clickup.com/features/calendar, Docs: https://clickup.com/features/docs, Whiteboards: https://clickup.com/features/whiteboards, Sprints: https://clickup.com/features/sprints, Automations: https://clickup.com/features/automations, and more...: https://clickup.com/features
- socialLinks
- none found
RDAP / registration
rdap- domain
- clickup.com
- registrar
- Amazon Registrar, Inc.
- created
- 2001-07-05T10:41:46Z
- expires
- 2027-07-05T10:41:46Z
- nameservers
- ns-1480.awsdns-57.org, ns-1962.awsdns-53.co.uk, ns-298.awsdns-37.com, ns-769.awsdns-32.net
- status
- client transfer prohibited
- error
- —
Public well-known
passive- /.well-known/security.txt
- HTTP 200 · found
- /robots.txt
- HTTP 200 · found
- /security.txt
- HTTP 403