Automatic security check · Public OSINT only
Company website
https://marketplace.visualstudio.com/
marketplace.visualstudio.com security check
Public OSINT valuation for marketplace.visualstudio.com: grade B (71/100). Title signal “Extensions for Visual Studio family of products | Visual Studio Marketplace”. 4 security headers present, 4 commonly expected headers missing. This is a defensive surface review — not a penetration test.
Trusted — verify
No major public red flags in this pass, but confirm reviews, ownership, and TLS details yourself. Passive OSINT only · inventKeys=false.
- High concern
- Elevated risk
- Caution advised
- Trusted — verify
- Strong protections
Company website · Services · Social
Company website
Services & products
- No service or product links found on the scanned pages.
Social & LinkedIn
- No social or LinkedIn company links found on the scanned pages.
Links are extracted from public crawl HTML only. We never invent profiles or product pages.
Research engines · Complete scan
This complete report delivers web-check-class passive modules to customers — DNS, TLS, headers, mail auth, archives, CT logs and more — researched in the spirit of Lissy93/web-check. Port scan, traceroute and Shodan stay off by policy. Run a live check on the security-check tool for the full interactive dashboard.
Connect this report to your website
Add a free badge that links visitors to this official Wordle security report. You get referral traffic and a backlink; customers can verify the dossier.
Trustpilot · Glassdoor
How we scored marketplace.visualstudio.com
Positive signals
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Content-Security-Policy observed.
- DNS resolves publicly (A/AAAA).
- robots.txt is publicly available.
- RDAP domain record available (visualstudio.com).
Risk signals
- Set-Cookie present but Secure/HttpOnly incomplete on sampled header.
Findings
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Content-Security-Policy observed.
- Set-Cookie present but Secure/HttpOnly incomplete on sampled header.
- DNS resolves publicly (A/AAAA).
- robots.txt is publicly available.
- RDAP domain record available (visualstudio.com).
- Final HTTP status 200 at https://marketplace.visualstudio.com/.
Technical details
DNS
resolved- A
- 150.171.73.16, 150.171.74.16
- AAAA
- 2603:1061:10::16, 2603:1061:10:1::16
- PTR
- —
- error
- —
TLS / certificate
ok- version
- TLSv1.3
- cipher
- TLS_AES_256_GCM_SHA384
- issuer
- Microsoft Corporation
- notAfter
- Jan 22 10:14:26 2027 GMT
- SAN sample
- marketplace.visualstudio.com, market.visualstudio.com, *.marketplace.visualstudio.com, *.gallery.vsassets.io
- error
- —
HTTP & security headers
4 present- finalUrl
- https://marketplace.visualstudio.com/
- status
- 200
- server
- —
- x-powered-by
- —
- present
- content-security-policy, strict-transport-security, x-content-type-options, x-frame-options
- missing
- referrer-policy, permissions-policy, cross-origin-opener-policy, cross-origin-resource-policy
- cookie Secure
- True
- cookie HttpOnly
- False
Tech fingerprint (public)
passive- title
- Extensions for Visual Studio family of products | Visual Studio Marketplace
- generator
- —
- tech
- React
- script hosts
- cdn.vsassets.io, x, wcpstatic.microsoft.com
- description
- One place for all extensions for Visual Studio, Azure DevOps Services, Azure DevOps Server and Visual Studio Code. Discover and install extensions and subscriptions to create the dev environment you need.
Company presence (crawl links)
extracted- companyWebsite
- https://marketplace.visualstudio.com/
- serviceLinks
- none found
- socialLinks
- none found
RDAP / registration
rdap- domain
- visualstudio.com
- registrar
- MarkMonitor Inc.
- created
- 1997-03-18T05:00:00Z
- expires
- 2027-03-19T04:00:00Z
- nameservers
- ns1-07.azure-dns.com, ns2-07.azure-dns.net, ns3-07.azure-dns.org, ns4-07.azure-dns.info
- status
- client delete prohibited, client transfer prohibited, client update prohibited
- error
- —
Public well-known
passive- /.well-known/security.txt
- HTTP 404
- /robots.txt
- HTTP 200 · found
- /security.txt
- HTTP 404