ecovadis.com

HTML metadata

Title

One Brain for the Supply Chain | EcoVadis

Description

Detailed insights to confidently manage value chain risk & compliance, build performance for net-zero & sustainability targets, drive value & impact: The universal sustainability ratings & intelligence suite.

Language

en

Canonical

https://ecovadis.com/

Translations

de
en
es
fr
it
ja
nl
pt

Open Graph

url: https://ecovadis.com/
title: One Brain for the Supply Chain
locale: en_US
site name: EcoVadis
description: Detailed insights to confidently manage value chain risk & compliance, build performance for net-zero & sustainability targets, drive value & impact: The universal sustainability ratings & intelligence suite.

Technology

Server: Apache
CMS: WordPress

Analytics

Google Tag Manager

Cookie consent

OneTrust

Third-party hosts loaded (6)

cdnjs.cloudflare.com×9
cdn.cookielaw.org×2
dev.visualwebsiteoptimizer.com×1
js-eu1.hs-scripts.com×1
www.facebook.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

NETIM SAS

Created

2007-02-26

Expires

2028-02-26 646 days left

Updated

2024-02-22

Name servers

ns1-05.azure-dns.com
ns2-05.azure-dns.net
ns3-05.azure-dns.org
ns4-05.azure-dns.info

DNS records live

NS

ns1-05.azure-dns.com
ns2-05.azure-dns.net
ns3-05.azure-dns.org
ns4-05.azure-dns.info

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 8 TXT records

cloudflare_dashboard_sso=4d84d6bf59f65184dc4e2ea491b5eb79
site24x7-signals-domain-verification=da8c98d4249c371a96fa08afacc8ecaa
dust-domain-verification-8xm3wg=cyJGvPPJLPj4RERVS6OxV2AIA
pardot_151391_*=9b7308123ba1775212c5892915b2f282ab480effa4bef169ee6fbc9d74d09079
3fc8085c9b1e42c7be2d48b08cb21f3b
pardot888293=bae9e99799ea9d70842052b3e4f4189de12a815c2cbc80795e082b86f8b3ea5e
docker-verification=7f30698a-e9a8-436a-b442-b9a842016ad5
pardot888293=21567a1faf0860b0adbaeef6af17f33e8802d579afc8ce2bdc1a0a87a413b339

Verified for

Anthropic
Apple
Atlassian
Canva
Cursor
Google
Microsoft 365
MongoDB
OneTrust
OpenAI
Pendo
Stripe
TeamViewer

Email authentication strong

SPF

v=spf1 include:5v01vudl7q.spf.mailauth.ironscales.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; adkim=s; aspf=s; rua=mailto:tozbvxx0t7@rua.mailauth.ironscales.com; ruf=mailto:tozbvxx0t7@ruf.mailauth.ironscales.com; pct=100; fo=1;

policy: reject (enforced)

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD7ItA3gDaBDd2xqQsiN3BL3MRNA7fkAIrVKgULXUCjLsLgZYGyh0YRg3fuu+9tr15eT6hxF+8/OCh…

selectors probed

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2026-02-12 to 2027-03-13

Expires in 296 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://ecovadis.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin,
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), autoplay=*, camera=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), sync-xhr=(), usb=(), xr-spatial-tracking=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' www.google.com *.ecovadis.com *.googleapis.com *.cookielaw.org *.cloudflare.com *.facebook.net *.cdntwrk.com *.wistia.com *.ml314.com ml314.com *.pardot.com *.salesloft.com *.hotjar.com *.pathmotion.io *.demandbase.com *.googletagmanager.com *.youtube.com *.cookielaw.org *.cloudflare.com *.cdntwrk.com *.wistia.com *.wistia.net *.googletagmanager.com *.google-analytics.com *.hotjar.com *.ecovadis-surveys.com *.licdn.com *.google.com *.gstatic.com *.gstatic.cn *.googleadservices.com *.doubleclick.net *.pardot.com *.recaptcha.net *.zscloud.net *.jsdelivr.net *.facebook.net *.scoop.it *.googleapis.com *.zoominfo.com *.clickagy.com *.hs-scripts.com *.zi-scripts.com *.hscollectedforms.net *.hs-analytics.net *.hs-banner.com *.hsadspixel.net *.hsforms.net yoast.com *.hubspot.com *.sentry-cdn.com *.surveymonkey.com *.dstillery.com *.bing.com *.media6degrees.com *.vwo.com *.clarity.ms *.visualwebsiteoptimizer.com
strict-transport-security: max-age=31536000; includeSubDomains;