epic.com

HTML metadata

Title: Epic | ...With the patient at the heart
Description: Founded in a basement in 1979, Epic develops software to help people get well, help people stay well, and help future generations be healthier.

Open Graph

title: Epic | ...With the patient at the heart
description: Founded in a basement in 1979, Epic develops software to help people get well, help people stay well, and help future generations be healthier.

Technology

CDN: Azure Front Door
CMS: Next.js

Social

Registration

Registrar

GoDaddy.com, LLC

Created

1990-08-23

Expires

2032-09-18 2313 days left

Updated

2025-08-21

Name servers

dns-public-a.epic.com
dns-public-b.epic.com

DNS records live

NS

dns-public-a.epic.com
dns-public-b.epic.com

MX

10 mxa-002b1501.gslb.pphosted.com
10 mxb-002b1501.gslb.pphosted.com

TXT

Show 20 TXT records

google-site-verification=yRsrp_UMWYEAinQPJMk4pGEjQ1g_GHlClKAQQhlDILc
google-site-verification=-soBjD2dSjwzWy32D6U1iFESqn6OXXbdyq7uAGt6Dk0
omnissa-connect-verification-878f36d3-22ef-4f2c-bd94-5edf9b7240c7
dvv-domain-verification-qJUTbF2Dy887cA4-jkohr78fdrth-11122024
google-site-verification=9gHTIG7J04JGUY0pb7sovwLaxODgwHyL_WR4m2aNAFw
google-site-verification=_f4Tz15_ZAO11opocOQyWEudEjMoX9zmtwuSCX1L4hI
adobe-idp-site-verification=764a0930c1f0a45744927da94c3f81d52dcbff5bbdd61e911c787cd563abd3e8
cerner-client-id=ecef76e7-fc5b-4e28-926c-ac59d563b714
ZOOM_verify_5C7YuGLzSpmbq8Jf8AwtBA
jamf-site-verification=-i3lICngXt0xNCS9H-KFEw
anthropic-domain-verification-9h0ng0=xVvaj4F97Y1PAeJTXlxKZVPKE
webexdomainverification.=6a7e721c-157a-40c9-bb20-b7fee2a87d56
autodesk-domain-verification=TTvSSIVSZ4pO8VVT2dzX
cisco-ci-domain-verification=2d7be719b234396133bb27fa81ecf1a891b0d6786e1e232a38b5590fdc61b6eb
7E01C4AF5079D6A50A370B1B91D15E3FAF40EFAE58708B292A70A03179C04CA7
MS=8818CB360E951A495600CFEAE38514B1E45CD2B0
cerner-client-id=1de0bac0-13b0-4b64-b0fc-eeb294dc173b
EjAhL1ACUFQbY3Dl6v9zvYRdkkGkvuq2LTFWgfZwrV39KXDQXvN3gTI258XPjRvtm8XyagbPclBxP5eSk4AVMg==
mgverify=77118f82d43232b4b9b8359d0b6167e1ccc2271ead077ac278505c9b9bf06238
vmware-cloud-verification-d75d5e1b-53e5-4e01-b2c5-1e03557fdd78

Email authentication strong

SPF

v=spf1 ip4:199.204.56.0/22 ip6:2620:72:0::/48 ip4:148.163.154.146 ip4:148.163.150.209 ip4:148.163.135.109 ip4:148.163.141.39 include:all.spf.avature.net include:servers.mcsv.net include:_spf.qemailserver.com ip4:98.103.134.115 ip4:65.52.194.2 ip4:13.66.64.205 ip4:206.16.217.4 ip4:76.74.103.228 ip4:12.130.50.132 ip4:76.74.103.196 ip4:96.230.64.221/28 ip4:76.223.139.67 ip4:76.223.139.68 ip4:76.223.139.69 ip4:76.223.139.70 ip4:213.244.137.23 include:spf.protection.shift4shop.com ~all

softfail (~all)

DMARC

v=DMARC1;p=reject;rua=mailto:175f6c23@mxtoolbox.dmarc-report.com,mailto:dmarcreports@epic.com;ruf=mailto:175f6c23@forensics.dmarc-report.com,mailto:dmarcfailures@epic.com;adkim=r;aspf=r;sp=none; fo=1

policy: reject (enforced) · sp=none

DKIM

default: v=DKIM1;k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCDfHU+MsTKk2INPT+t9DZ1Ht8zNa/9oOGVaQQOxC+vnrj2/K/10Cp5pzU4EvPp+ZNxkBRQPH4rPnid+piuYIJy…
selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCjFK51jh5wiLQyXtV+5tXRwBdXXiogxsQmh/hHEAK200LUbrpCZix7dlz2Th0NVOgXug3ubyPPgRjRc1GV9/…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

GeoTrust TLS RSA CA G1

from 2026-02-16 to 2026-08-17

Expires in 89 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.epic.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: origin-when-cross-origin
x-frame-options: DENY
permissions-policy: camera=(), microphone=(), geolocation=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' www.gstatic.com www.google.com stats.epic.com; child-src embed-ssl.ted.com embed.ted.com e.issuu.com secure.quantserve.com sentry.issuu.com pingback.issuu.com www.youtube.com player.vimeo.com www.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com; form-action 'self'; font-src 'self' https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com; connect-src 'self' www.google.com stats.epic.com; img-src 'self' data: stats.epic.com i.ytimg.com media.epic.com media.epic.com epicshare.blob.core.windows.net media.epic.com;
strict-transport-security: max-age=31536000; includeSubDomains; preload