akros.ch

HTML metadata

Title: AKROS | Schweizer IT Dienstleister | Massgeschneiderte Lösungen
Description: Massgeschneiderte IT Lösungen & Dienstleistungen ✓ Geschäftsprozessintegration ✓ Datenmanagement ✓ Softwarelösungen ✓ über 600 Spezialisten ✓ Noser Group
Language: de
Canonical: https://www.akros.ch/

Open Graph

url: https://www.akros.ch/
title: AKROS | Schweizer IT Dienstleister | Massgeschneiderte Lösungen
locale: de_DE
site name: AKROS
description: Massgeschneiderte IT Lösungen & Dienstleistungen ✓ Geschäftsprozessintegration ✓ Datenmanagement ✓ Softwarelösungen ✓ über 600 Spezialisten ✓ Noser Group

Technology

Server: nginx
CMS: WordPress
jQuery: 3.7.1

Analytics

Google Tag Manager

Third-party hosts loaded (2)

www.google.com×1
www.googletagmanager.com×1

Contact

Phone

+41323299030

DNS records live

NS

ns03-1.akros.ch
ns03-2.akros.ch

MX

10 akros-ch.mail.protection.outlook.com

TXT

iUCCL/SfXWxj8LYreGEXapbQ78XIve2hGzKgTwPUxWLHMtA9M06vKd6m3MpoKVSR7PSABIyXEMDnzTa9gECBVw==
pardot518611=ce7df4cacba958d149b76fe402b7b865a5fd4b3fef989f04816523b6b9e2d5ef

Verified for

Atlassian
Google
Microsoft 365

Email authentication strong

SPF

v=spf1 a mx ip4:87.117.70.1 ip4:87.117.70.2 ip4:94.176.192.0/24 ip4:185.85.104.0/21 include:spf.protection.outlook.com include:et._spf.pardot.com include:spf.abacuscity.ch include:_spf.atlassian.net include:_spf.salesforce.com include:27055601.spf04.hubspotemail.net -all

strict (-all)

DMARC

v=DMARC1; p=reject; adkim=r; aspf=r

policy: reject (enforced)

DKIM

s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1gU64wM331J2x42nJ5l0VWV9mz2yyXOQwlgqvQ5eOkANWTV43m7GSCUU9MBBKHDpm6+8o9nY+5vm506tZ…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC8tvSmzHnj/KkHIVAuonmai05ZFiat3Js8GETYTxg0Pfb3773i53A56TIx89vrodwSgVPFTQFqQ1Tg/KOpQM6YlC…

selectors probed

Certificate (current)

R12

from 2026-03-22 to 2026-06-20

Expires in 30 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.akros.ch/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection

Header values

referrer-policy: same-origin
permissions-policy: geolocation=(),midi=(),notifications=(),push=(),sync-xhr=(),accelerometer=(),gyroscope=(),magnetometer=(),payment=(),camera=(),microphone=(),usb=(),xr=(),speaker=(self),vibrate=(),fullscreen=(self)
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self'; object-src 'none'; worker-src blob: 'self'; connect-src 'self' *.hsforms.com *.hsforms.net *.youtube.com https://www.googletagmanager.com https://www.gstatic.com https://cdn.cookielaw.org https://cookie-cdn.cookiepro.com *.hotjar.com *.hotjar.io wss://ws.hotjar.com *.googlesyndication.com *.google-analytics.com https://www.google.com https://code.jquery.com *.onetrust.com *.linkedin.com *.googleapis.com *.hs-analytics.net *.hs-banner.com *.hs-scripts.com *.licdn.com *.doubleclick.net https://www.googleadservices.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.hsforms.com *.hsforms.net *.youtube.com https://www.googletagmanager.com https://www.gstatic.com https://cdn.cookielaw.org https://cookie-cdn.cookiepro.com *.hotjar.com *.hotjar.io wss://ws.hotjar.com *.googlesyndication.com *.google-analytics.com https://www.google.com https://code.jquery.com *.onetrust.com *.linkedin.com *.googleapis.com *.hs-analytics.net *.hs-banner.com *.hs-scripts.com *.licdn.c
strict-transport-security: max-age=31536000; includeSubDomains; preload