easehealth.com

HTML metadata

Title: Ease Health | AI-Native CRM, EHR & RCM for Behavioral Health
Description: The #1 EHR and billing platform for behavioral health. $2.5B+ claims processed, 99% FPAR, AI-powered documentation, integrated telehealth.
Language: en-US
Canonical: https://easehealth.com

Open Graph

url: https://easehealth.com
title: Ease Health | AI-Native CRM, EHR & RCM for Behavioral Health
description: The #1 EHR and billing platform for behavioral health. $2.5B+ claims processed, 99% FPAR, AI-powered documentation, integrated telehealth.

Technology

CDN: Vercel
CMS: Next.js

Analytics

Google Tag Manager

Third-party hosts loaded (2)

static.hsappstatic.net×1
www.googletagmanager.com×1

Social

Registration

Registrar

GoDaddy.com, LLC

Created

2010-04-16

Expires

2028-04-16 695 days left

Updated

2025-09-17

Name servers

ns05.domaincontrol.com
ns06.domaincontrol.com

DNS records live

NS

ns05.domaincontrol.com
ns06.domaincontrol.com

MX

Show 6 MX records

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
32767 ms87943562.msv1.invalid
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

one-time-verification=fc3947c4-99dc-417f-a07f-55ab1b4d874c

Verified for

Google
Microsoft 365
Zoom

Email authentication strong

SPF

v=spf1 include:51047434.spf03.hubspotemail.net include:_spf.google.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; adkim=r; aspf=r; rua=mailto:dmarc@easehealth.com;

policy: quarantine

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFKC/NOgCFoH+ddJ1x65rrIzDqLv0NtcFv0hggtrtNRL+xSYqfB2G0TZv3vwUQxKsCeRnj4uMHQpLp…

selectors probed

Certificate (current)

R13

from 2026-04-08 to 2026-07-07

Expires in 47 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://easehealth.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: camera=(), microphone=(), geolocation=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://*.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://js.hs-scripts.com https://js-na1.hs-scripts.com https://js-na2.hs-scripts.com https://js.hsforms.net https://js.hscollectedforms.net https://js-na2.hscollectedforms.net https://js.hs-analytics.net https://js-na2.hs-analytics.net https://js.hs-banner.com https://js-na2.hs-banner.com https://js.hsadspixel.net https://js-na2.hsadspixel.net https://*.hubspot.com https://*.hsappstatic.net https://api-js.mixpanel.com https://cdn.mxpnl.com https://connect.facebook.net https://snap.licdn.com https://analytics.tiktok.com https://ddwl4m2hdecbv.cloudfront.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https: blob:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' dat
strict-transport-security: max-age=63072000; includeSubDomains; preload
cross-origin-opener-policy: same-origin-allow-popups

Links to (4)

Linked from (1)

marcgagnon.co×2