doc-cirrus.com

HTML metadata

Title: Praxissoftware für Arztpraxen & MVZ | Doc Cirrus inSuite
Description: Moderne Praxissoftware für Ärztinnen und Ärzte: Dokumentation, Abrechnung, Terminmanagement mit inSuite ✓ DSGVO-konform ✓ KBV-zertifiziert
Language: de
Generator: TYPO3 CMS
Canonical: https://www.doc-cirrus.com/

Open Graph

title: inSuite | Die All-in-One-Praxissoftware für moderne Praxen
locale: de_DE
description: Praxissoftware mit lokaler Datenhoheit & allen Cloud-Vorteilen ✓ Sicher & flexibel für reibungslosen Praxisalltag ✓ Für alle Fachrichtungen ✓ Kostenfrei testen!

Technology

Server: Apache

Analytics

Google Tag Manager

Third-party hosts loaded (2)

widgets.kununu.com×1
www.googletagmanager.com×1

Social

Contact

Phone

+4930208987295

Address

Pohlstraße 20, 10785, Berlin, Berlin, DE

Registration

Registrar

Variomedia AG

Created

2012-03-12

Expires

2027-03-12 294 days left

Updated

2026-03-13

Name servers

ns1.variomedia.de
ns2.variomedia.de

DNS records live

NS

ns1.variomedia.de
ns2.variomedia.de

MX

10 doccirrus-com0i.mail.protection.outlook.com

TXT

atlassian-sending-domain-verification=dd826f7b-c2d8-4238-8fab-734c7746801d

Verified for

Atlassian
Google

Email authentication strong

SPF: v=spf1 mx include:spf.doc-cirrus.com include:spf.variomedia.de include:spf.crsend.com include:spfa.myconvento.com include:spf.protection.outlook.com include:agenturserver.de -all
strict (-all)
DMARC: v=dmarc1; p=quarantine; rua=mailto:dmarc-reports@doc-cirrus.com; pct=50; fo=s;
policy: quarantine · pct=50
DKIM: no key found at common selectors

Certificate (current)

R13

from 2026-05-10 to 2026-08-08

Expires in 78 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.doc-cirrus.com/

present

strict-transport-security
content-security-policy
content-security-policy-report-only
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), autoplay=*, camera=(), cross-origin-isolated=*, display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), window-placement=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' *.cookiebot.com *.google-analytics.com *.gstatic.com *.googleapis.com *.mapbox.com *.g.doubleclick.net *.doc-cirrus.com *.smarketer.de; script-src 'self' 'unsafe-inline' *.cookiebot.com *.webspaceconfig.de *.googletagmanager.com *.google-analytics.com *.doc-cirrus.com *.smarketer.de *.doubleclick.net *.googleadservices.com 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com *.google-analytics.com *.gstatic.com *.googleapis.com *.kununu.com *.google.com *.google.de *.googleadservices.com *.cookiebot.com *.googletagmanager.com *.heydata.eu *.doc-cirrus.com *.google.ch *.google.co.in *.google.ru *.google.nl; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com *.cookiebot.com consentcdn.cookiebot.com *.googletagmanager.com *.personio.de *.jobs.personio.de; style-src-elem 'self' 'unsafe-inline' *.googleapis.com *.mapbox.com *.webspaceconfig.de 'report-sample'; connect-src 'self' *.
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-security-policy-report-only: default-src 'self' *.cookiebot.com *.google-analytics.com *.gstatic.com *.googleapis.com *.mapbox.com *.g.doubleclick.net *.doc-cirrus.com *.smarketer.de; script-src 'self' 'unsafe-inline' *.cookiebot.com *.webspaceconfig.de *.googletagmanager.com *.google-analytics.com *.doc-cirrus.com *.smarketer.de *.doubleclick.net *.googleadservices.com 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com *.google-analytics.com *.gstatic.com *.googleapis.com *.kununu.com *.google.com *.google.de *.googleadservices.com *.cookiebot.com *.googletagmanager.com *.heydata.eu *.doc-cirrus.com *.google.ch *.google.co.in *.google.ru *.google.nl; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com *.cookiebot.com consentcdn.cookiebot.com *.googletagmanager.com *.personio.de *.jobs.personio.de; style-src-elem 'self' 'unsafe-inline' *.googleapis.com *.mapbox.com *.webspaceconfig.de 'report-sample'; connect-src 'self' *.

Links to (5)

Linked from (1)

kinderpraxis-jena.de×2