braintrust.dev

.dev crawl

First seen 2026-04-11 · Last seen 2026-05-18 · ok HTTP/1.1 200 1247 ms crawled 2026-05-18

US · 76.76.21.21 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: Braintrust - The AI observability platform for building quality AI products
Language: en
Canonical: https://www.braintrust.dev

Open Graph

url: https://www.braintrust.dev
title: Braintrust - The AI observability platform for building quality AI products
locale: en_US
site name: Braintrust

Technology

CDN: Vercel
CMS: Next.js

Analytics

Google Tag Manager

Third-party hosts loaded (2)

pixel-cdn.default.com×1
www.googletagmanager.com×1

Social

Contact

Address: San Francisco, CA, US

DNS records live

NS

ns-1502.awsdns-59.org
ns-1840.awsdns-38.co.uk
ns-288.awsdns-36.com
ns-603.awsdns-11.net

MX

1 smtp.google.com

TXT

Show 6 TXT records

google-site-verification=-nzCMbSqGLFHIKBcQYdRYzpeyfUTQ8tVCzmxkPp7NCc
google-site-verification=4uTC74PzruutORDPpUjtAhbDMZTZu5l9yjYiRzZ1VPs
google-site-verification=gutv26BfYBNTTmBXi_CGOvwYloXh73MfHVbAF9fSvQI
notion-domain-verification=sEeLTsW5m7hNl98NbpeaZeoE6gs6dPMRY9gfngd6SPT
3qybh2da63
ZOOM_verify_ZRjxruwbgqXyRPESMj4HTK

Email authentication strong

SPF

v=spf1 include:_spf.google.com ~all

softfail (~all)

DMARC

v=DMARC1;p=reject;pct=100;rua=mailto:a8a29a9e43@rua.easydmarc.eu;ruf=mailto:a8a29a9e43@ruf.easydmarc.eu;ri=86400;fo=1;

policy: reject (enforced)

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYESTVIZxT5mzsFnd8EmTcaBqCETHo3G/QYNo0hA00KNCMFLnIvO9R2rpMyeSNAbxYkmdF3evlvYjm…

selectors probed

Certificate (current)

R12

from 2026-04-23 to 2026-07-22

Expires in 63 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.braintrust.dev/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: script-src 'self' 'unsafe-eval' 'wasm-unsafe-eval' 'strict-dynamic' 'nonce-M2ZkMWEzN2QtOWRlYy00NjcwLWEyNDYtYTQ2M2NmMmZmM2Nl' *.js.stripe.com js.stripe.com maps.googleapis.com ; style-src 'self' 'unsafe-inline' *.braintrust.dev btcm6qilbbhv4yi1.public.blob.vercel-storage.com fonts.googleapis.com www.gstatic.com d4tuoctqmanu0.cloudfront.net; font-src 'self' data: fonts.gstatic.com btcm6qilbbhv4yi1.public.blob.vercel-storage.com cdn.jsdelivr.net d4tuoctqmanu0.cloudfront.net fonts.googleapis.com mintlify-assets.b-cdn.net fonts.cdnfonts.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; worker-src 'self' blob:; report-uri https://o4507221741076480.ingest.us.sentry.io/api/4507221754380288/security/?sentry_key=27fa5ac907cf7c6ce4a1ab2a03f805b4&sentry_environment=production&sentry_release=16; report-to csp-endpoint-0
strict-transport-security: max-age=63072000