Unclassified // For public releaseWordle · Official security dossier
Automatic security check · Public OSINT only
Company website
github.com security check
Public OSINT valuation for github.com: grade A (92/100). Title signal “GitHub · Change is constant. GitHub keeps you ahead. · GitHub · GitHub”. 5 security headers present, 3 commonly expected headers missing. This is a defensive surface review — not a penetration test.
92
/100
Grade A
92%
Strong protections
Public signals look solid. Keep verifying ownership and payment flows for high-stakes use. Passive OSINT only · inventKeys=false.
- High concern
- Elevated risk
- Caution advised
- Trusted — verify
- Strong protections
Company website · Services · Social
Company website
Services & products
- Copilot AI coding agent for tasks, projects and automated work
- Actions CI/CD and automation
- Code Quality Quality analysis, fixes, and enforcement
- Codespaces Cloud development environments
- All Features
- Build with Copilot
- Nonprofits
- Healthcare
- Financial services
- Manufacturing
- Government
- Copilot for business Enterprise-grade AI features
- Pricing
Links are extracted from public crawl HTML only. We never invent profiles or product pages.
Research engines · Complete scan
This complete report delivers web-check-class passive modules to customers — DNS, TLS, headers, mail auth, archives, CT logs and more — researched in the spirit of Lissy93/web-check. Port scan, traceroute and Shodan stay off by policy. Run a live check on the security-check tool for the full interactive dashboard.
Connect this report to your website
Add a free badge that links visitors to this official Wordle security report. You get referral traffic and a backlink; customers can verify the dossier.
Trustpilot · Glassdoor
How we scored github.com
Positive signals
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Content-Security-Policy observed.
- Set-Cookie includes Secure and HttpOnly flags.
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
- RDAP domain record available (github.com).
Risk signals
- No elevated risk signals recorded in this pass.
Findings
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Content-Security-Policy observed.
- Set-Cookie includes Secure and HttpOnly flags.
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
- robots.txt is publicly available.
- RDAP domain record available (github.com).
- Final HTTP status 200 at https://github.com/.
Technical details
DNS
resolved- A
- 140.82.121.4
- AAAA
- —
- PTR
- lb-140-82-121-4-fra.github.com
- error
- —
TLS / certificate
ok- version
- TLSv1.3
- cipher
- TLS_AES_128_GCM_SHA256
- issuer
- Sectigo Limited
- notAfter
- Jan 27 23:59:59 2027 GMT
- SAN sample
- github.com, www.github.com
- error
- —
HTTP & security headers
5 present- finalUrl
- https://github.com/
- status
- 200
- server
- github.com
- x-powered-by
- —
- present
- content-security-policy, referrer-policy, strict-transport-security, x-content-type-options, x-frame-options
- missing
- permissions-policy, cross-origin-opener-policy, cross-origin-resource-policy
- cookie Secure
- True
- cookie HttpOnly
- True
Tech fingerprint (public)
passive- title
- GitHub · Change is constant. GitHub keeps you ahead. · GitHub · GitHub
- generator
- —
- tech
- React
- script hosts
- github.githubassets.com
- description
- Join the world's most widely adopted, AI-powered developer platform where millions of developers, businesses, and the largest open source community build software that advances humanity.
Company presence (crawl links)
extracted- companyWebsite
- https://github.com/
- serviceLinks
- Copilot AI coding agent for tasks, projects and automated work: https://github.com/features/copilot, Actions CI/CD and automation: https://github.com/features/actions, Code Quality Quality analysis, fixes, and enforcement: https://github.com/features/code-quality, Codespaces Cloud development environments: https://github.com/features/codespaces, All Features: https://github.com/features, Build with Copilot: https://github.com/features/ai, Nonprofits: https://github.com/solutions/industry/nonprofits, Healthcare: https://github.com/solutions/industry/healthcare, Financial services: https://github.com/solutions/industry/financial-services, Manufacturing: https://github.com/solutions/industry/manufacturing, Government: https://github.com/solutions/industry/government, Copilot for business Enterprise-grade AI features: https://github.com/features/copilot/copilot-business
- socialLinks
- GitHub: https://docs.github.com/en, GitHub: https://github.com/customer-stories, GitHub: https://github.com/enterprise, GitHub: https://github.com/enterprise/premium-support, GitHub: https://github.com/enterprise/startups, GitHub: https://github.com/marketplace, GitHub: https://github.com/open-source/sponsors, GitHub: https://github.com/partners, GitHub: https://github.com/platform, GitHub: https://github.com/resources, GitHub: https://github.com/resources/events, GitHub: https://github.com/security/advanced-security
RDAP / registration
rdap- domain
- github.com
- registrar
- MarkMonitor Inc.
- created
- 2007-10-09T18:20:50Z
- expires
- 2028-10-09T18:20:50Z
- nameservers
- dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, dns4.p08.nsone.net, ns-1283.awsdns-32.org, ns-1707.awsdns-21.co.uk, ns-421.awsdns-52.com, ns-520.awsdns-01.net
- status
- client delete prohibited, client transfer prohibited, client update prohibited
- error
- —
Public well-known
passive- /.well-known/security.txt
- HTTP 200 · found
- /robots.txt
- HTTP 200 · found
- /security.txt
- HTTP 404