Unclassified // For public releaseWordle · Official security dossier

Looking for more in-depth information on this company—or any company worldwide? Visit companyforensics.org.

Automatic security check · Public OSINT only

Company website

https://vercel.com/

79%

Trusted — verify

No major public red flags in this pass, but confirm reviews, ownership, and TLS details yourself. Passive OSINT only · inventKeys=false.

High concern
Elevated risk
Caution advised
Trusted — verify
Strong protections

vercel.com security check

Name: vercel.com security check — Trusted — verify | Wordle
Item: vercel.com
Rating: 79
Author: Wordle

Public OSINT valuation for vercel.com: grade B (79/100). Title signal “Agentic Infrastructure - Vercel”. 5 security headers present, 3 commonly expected headers missing. This is a defensive surface review — not a penetration test.

/100

Grade B

Company website · Services · Social

Company website

https://vercel.com/

Services & products

Observability https://vercel.com/products/observability
CI/CD https://vercel.com/products/previews
Marketing Sites https://vercel.com/solutions/marketing-sites
Marketplace https://vercel.com/marketplace
Pricing https://vercel.com/pricing
Platform Security https://vercel.com/security
Turborepo https://vercel.com/solutions/turborepo
AI Apps https://vercel.com/solutions/ai-apps
Commerce https://vercel.com/solutions/composable-commerce
Platform Engineers https://vercel.com/solutions/platform-engineering
Design Engineers https://vercel.com/solutions/design-engineering

Social & LinkedIn

LinkedIn https://linkedin.com/company/vercel
GitHub https://github.com/vercel
Instagram https://www.instagram.com/vercel/
X (Twitter) https://x.com/vercel
YouTube https://youtube.com/@VercelHQ

Links are extracted from public crawl HTML only. We never invent profiles or product pages.

Research engines · Complete scan

This complete report delivers web-check-class passive modules to customers — DNS, TLS, headers, mail auth, archives, CT logs and more — researched in the spirit of Lissy93/web-check. Port scan, traceroute and Shodan stay off by policy. Run a live check on the security-check tool for the full interactive dashboard.

Connect this report to your website

Add a free badge that links visitors to this official Wordle security report. You get referral traffic and a backlink; customers can verify the dossier.

Open this public report

Badge HTML (copy into your footer or About page)

<!-- Wordle Official Security Report badge -->
<a href="https://wordle.review/vercel.com/#security-report" title="Wordle Official Security Report for vercel.com" rel="noopener"><img src="https://wordle.review/security-check/assets/official-security-report-seal-v20261102w.png" alt="Wordle Official Security Report · score 79/100" width="88" height="88" loading="lazy" /></a>

Trustpilot · Glassdoor

Trustpilot

—

Official Trustpilot signals only — never scraped. Shown when a public Business Unit profile exists (inventKeys=false).

Open Trustpilot for vercel.com ↗

Glassdoor

—

No Glassdoor scrape. Search the official employer directory when no linked profile is present.

Search Glassdoor ↗

Hosting · IP · map

IP64.239.109.193
ASNAS16509
HostingVercel, Inc
GeoLos Angeles, California, United States

Query
vercel.comRequested hostname
IP
64.239.109.193Los Angeles, California, United States
ASN
AS16509Vercel, Inc
Trace
ICMP traceroute off by policyPassive IP path only · inventKeys=false

Sources: DNS · ipwho.is geolocation · OpenStreetMap embed. Soft-fail if geo blocked · inventKeys=false.

Domain registration · business age

RegistrarAmazon Registrar, Inc.

Registered1999-10-04

Domain age27 years 1 mo

Registry / location.com registry (RDAP)

Public RDAP / WHOIS only. Soft-fail when WHOIS is blocked — we never invent registrar or age.

How we scored vercel.com

Positive signals

TLS handshake OK (TLSv1.3).
HTTP Strict Transport Security is present.
Content-Security-Policy observed.
DNS resolves publicly (A/AAAA).
security.txt found (coordinated disclosure signal).
robots.txt is publicly available.
RDAP domain record available (vercel.com).

Risk signals

Set-Cookie present but Secure/HttpOnly incomplete on sampled header.
X-Powered-By disclosed: Next.js, Payload.

Findings

TLS handshake OK (TLSv1.3).
HTTP Strict Transport Security is present.
Content-Security-Policy observed.
Set-Cookie present but Secure/HttpOnly incomplete on sampled header.
X-Powered-By disclosed: Next.js, Payload.
DNS resolves publicly (A/AAAA).
security.txt found (coordinated disclosure signal).
robots.txt is publicly available.
RDAP domain record available (vercel.com).
Final HTTP status 200 at https://vercel.com/.

Technical details

DNS

resolved

A: 64.239.109.193, 64.239.109.129
AAAA: —
PTR: —
error: —

TLS / certificate

version: TLSv1.3
cipher: TLS_AES_128_GCM_SHA256
issuer: Let's Encrypt
notAfter: Dec 24 12:18:21 2026 GMT
SAN sample: *.vercel.com, vercel.com
error: —

HTTP & security headers

5 present

finalUrl: https://vercel.com/
status: 200
server: Vercel
x-powered-by: Next.js, Payload
present: content-security-policy, referrer-policy, strict-transport-security, x-content-type-options, x-frame-options
missing: permissions-policy, cross-origin-opener-policy, cross-origin-resource-policy
cookie Secure: True
cookie HttpOnly: False

Tech fingerprint (public)

passive

title: Agentic Infrastructure - Vercel
generator: —
tech: React, Next.js
script hosts: x
description: The autonomous stack for every app and agent.

Company presence (crawl links)

extracted

companyWebsite: https://vercel.com/
serviceLinks: Observability: https://vercel.com/products/observability, CI/CD: https://vercel.com/products/previews, Marketing Sites: https://vercel.com/solutions/marketing-sites, Marketplace: https://vercel.com/marketplace, Pricing: https://vercel.com/pricing, Platform Security: https://vercel.com/security, Turborepo: https://vercel.com/solutions/turborepo, AI Apps: https://vercel.com/solutions/ai-apps, Commerce: https://vercel.com/solutions/composable-commerce, Platform Engineers: https://vercel.com/solutions/platform-engineering, Design Engineers: https://vercel.com/solutions/design-engineering
socialLinks: LinkedIn: https://linkedin.com/company/vercel, GitHub: https://github.com/vercel, Instagram: https://www.instagram.com/vercel/, X (Twitter): https://x.com/vercel, YouTube: https://youtube.com/@VercelHQ

RDAP / registration

rdap

domain: vercel.com
registrar: Amazon Registrar, Inc.
created: 1999-10-04T19:30:47Z
expires: 2029-10-04T19:30:47Z
nameservers: a.zeit-world.co.uk, b.zeit-world.org, e.zeit-world.com, f.zeit-world.net
status: client transfer prohibited
error: —

Public well-known

passive

/.well-known/security.txt: HTTP 200 · found
/robots.txt: HTTP 200 · found
/security.txt: HTTP 200 · found

Analyzed 2026-11-02T16:20:27Z WORDLE passive OSINT (DNS/TLS/HTTP/RDAP/well-known) — no exploits More recent checks

looking for more information about this company or any company in the world? -Contact http://companyforensics.org

This service was brought to you by http://dotsynergygroup.com