Unclassified // For public releaseWordle · Official security dossier

Looking for more in-depth information on this company—or any company worldwide? Visit companyforensics.org.

Automatic security check · Public OSINT only

Company website

https://slack.com/

76%

Trusted — verify

No major public red flags in this pass, but confirm reviews, ownership, and TLS details yourself. Passive OSINT only · inventKeys=false.

  1. High concern
  2. Elevated risk
  3. Caution advised
  4. Trusted — verify
  5. Strong protections

slack.com security check

Public OSINT valuation for slack.com: grade B (76/100). Title signal “Slack | AI Work Platform & Productivity Tools”. 4 security headers present, 4 commonly expected headers missing. This is a defensive surface review — not a penetration test.

76
/100
Grade B
Trusted — verify

No major public red flags in this pass, but confirm reviews, ownership, and TLS details yourself.

Checked 2026-11-02T15:48:46Z · Method: automated passive checks · No attacks, no exploits

Company website · Services · Social

Company website

https://slack.com/

Services & products

Social & LinkedIn

  • LinkedIn https://www.linkedin.com/company/tiny-spec-inc/
  • Facebook https://facebook.com/slackhq
  • Instagram https://www.instagram.com/slackhq/
  • TikTok https://www.tiktok.com/@slackhq
  • X (Twitter) https://twitter.com/slackhq
  • YouTube https://www.youtube.com/channel/UCY3YECgeBcLCzIrFLP4gblw

Links are extracted from public crawl HTML only. We never invent profiles or product pages.

Research engines · Complete scan

This complete report delivers web-check-class passive modules to customers — DNS, TLS, headers, mail auth, archives, CT logs and more — researched in the spirit of Lissy93/web-check. Port scan, traceroute and Shodan stay off by policy. Run a live check on the security-check tool for the full interactive dashboard.

Connect this report to your website

Add a free badge that links visitors to this official Wordle security report. You get referral traffic and a backlink; customers can verify the dossier.

Open this public report

Trustpilot · Glassdoor

Trustpilot

—

Official Trustpilot signals only — never scraped. Shown when a public Business Unit profile exists (inventKeys=false).

Open Trustpilot for slack.com ↗

Glassdoor

—

No Glassdoor scrape. Search the official employer directory when no linked profile is present.

Search Glassdoor ↗

Hosting · IP · map

  • IP3.68.124.168
  • ASNAS16509
  • HostingA100 ROW GmbH
  • GeoFrankfurt am Main, Hessen, Germany
  1. Query
    slack.comRequested hostname
  2. IP
    3.68.124.168Frankfurt am Main, Hessen, Germany
  3. ASN
    AS16509A100 ROW GmbH
  4. Trace
    ICMP traceroute off by policyPassive IP path only · inventKeys=false

Sources: DNS · ipwho.is geolocation · OpenStreetMap embed. Soft-fail if geo blocked · inventKeys=false.

Domain registration · business age

RegistrarMarkMonitor Inc.
Registered1992-10-21
Domain age34 years
Registry / location.com registry (RDAP)

Public RDAP / WHOIS only. Soft-fail when WHOIS is blocked — we never invent registrar or age.

How we scored slack.com

Positive signals

  • TLS handshake OK (TLSv1.3).
  • HTTP Strict Transport Security is present.
  • DNS resolves publicly (A/AAAA).
  • security.txt found (coordinated disclosure signal).
  • robots.txt is publicly available.
  • RDAP domain record available (slack.com).

Risk signals

  • Content-Security-Policy not observed.
  • X-Content-Type-Options missing.
  • Set-Cookie present but Secure/HttpOnly incomplete on sampled header.

Findings

Technical details

DNS

resolved
A
3.68.124.168, 52.29.238.212, 18.159.197.225, 3.68.124.95, 3.68.170.153, 3.68.175.98
AAAA
—
PTR
ec2-3-68-124-168.eu-central-1.compute.amazonaws.com
error
—

TLS / certificate

ok
version
TLSv1.3
cipher
TLS_AES_256_GCM_SHA384
issuer
Let's Encrypt
notAfter
Jan 5 08:37:07 2027 GMT
SAN sample
*.slack.com, slack.com
error
—

HTTP & security headers

4 present
finalUrl
https://slack.com/
status
200
server
Apache
x-powered-by
—
present
cross-origin-opener-policy, referrer-policy, strict-transport-security, x-frame-options
missing
content-security-policy, x-content-type-options, permissions-policy, cross-origin-resource-policy
cookie Secure
True
cookie HttpOnly
False

Tech fingerprint (public)

passive
title
Slack | AI Work Platform & Productivity Tools
generator
—
tech
Google Analytics
script hosts
a.slack-edge.com, cdn.cookielaw.org, d34u8crftukxnk.cloudfront.net
description
Boost productivity and save time with Slack‌ — ‌the AI work platform for managing projects, automating workflows, and connecting teams securely. Start working smarter today.

RDAP / registration

rdap
domain
slack.com
registrar
MarkMonitor Inc.
created
1992-10-21T04:00:00Z
expires
2027-10-20T04:00:00Z
nameservers
ns-1493.awsdns-58.org, ns-166.awsdns-20.com, ns-1901.awsdns-45.co.uk, ns-606.awsdns-11.net
status
client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
error
—

Public well-known

passive
/.well-known/security.txt
HTTP 200 · found
/robots.txt
HTTP 200 · found
/security.txt
HTTP 200 · found
Analyzed 2026-11-02T15:48:46Z WORDLE passive OSINT (DNS/TLS/HTTP/RDAP/well-known) — no exploits More recent checks

looking for more information about this company or any company in the world? -Contact http://companyforensics.org

This service was brought to you by http://dotsynergygroup.com