indexo.dev

breeze-sec.com

.com crawl

First seen 2026-06-01 · Last seen 2026-06-01 · ok HTTP/1.1 200 704 ms crawled 2026-06-01

US · 3.164.206.120 · AS16509 Amazon.com, Inc.

Reputation 89/100 weak security headers dmarc monitor-only

Classifying

HTML metadata

Title
Breeze Security
Description
Breeze deploys AI agents that discover misconfigurations, trace attack paths, and neutralize exposure risk before attackers can act.
Language
en

Open Graph

url
https://breezesecurity.com/
title
Breeze Security
description
Breeze deploys AI agents that discover misconfigurations, trace attack paths, and neutralize exposure risk before attackers can act.

Technology

CDN
Amazon CloudFront
Server
CloudFront
Fonts
  • Google Fonts

Third-party hosts loaded (2)

  • fonts.googleapis.com×2
  • fonts.gstatic.com×1

Registration

Registrar
Amazon Registrar, Inc.
Created
2023-07-11
Expires
2026-07-11 38 days left
Updated
2026-05-13
Name servers
  • ns-1102.awsdns-09.org
  • ns-162.awsdns-20.com
  • ns-1959.awsdns-52.co.uk
  • ns-740.awsdns-28.net

DNS records live

NS
  • ns-1102.awsdns-09.org
  • ns-162.awsdns-20.com
  • ns-1959.awsdns-52.co.uk
  • ns-740.awsdns-28.net
MX
  • 1 aspmx.l.google.com
  • 10 alt3.aspmx.l.google.com
  • 10 alt4.aspmx.l.google.com
  • 5 alt1.aspmx.l.google.com
  • 5 alt2.aspmx.l.google.com
Verified for
  • Google

Email authentication partial

SPF
v=spf1 include:_spf.google.com -all
strict (-all)
DMARC
v=DMARC1; p=none; rua=mailto:dmarc-reports@breeze-security.com; ruf=mailto:dmarc-reports@breeze-security.com
policy: none (monitoring only)
DKIM
  • google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDExRCguXCTJ8o+DBOmI3hjkLspah2ql+Q5kamM9F0FQUldoa2uJJtj3NWtkJ80nogRf1oDiAE4lyeeSn5bXg…
selectors probed

Certificate (current)

Amazon RSA 2048 M04
from 2026-02-12 to 2027-03-14
Expires in 284 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://breeze-sec.com/

present
  • content-security-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
content-security-policy
default-src 'self' * data: blob:;script-src 'self' * 'unsafe-eval';style-src 'self' * 'unsafe-inline';img-src 'self' * data: blob:;connect-src 'self' * data: blob:;font-src 'self' * data:;object-src 'self' * data: blob:;media-src 'self' * data: blob:;frame-src 'self' *;frame-ancestors 'self';base-uri 'self';form-action 'self' *;upgrade-insecure-requests;block-all-mixed-content;

Linked from (1)