expel.com

HTML metadata

Title: Leading managed detection & response (MDR) security services | Expel
Description: Expel is a recognized, leading managed detection and response (MDR) provider offering transparent service and a 17-minute MTTR on high/critical incidents.
Language: en-US
Generator: WP Rocket 3.21.0.1
Canonical: https://expel.com/

Open Graph

url: https://expel.com/
title: Leading managed detection & response (MDR) security services | Expel
locale: en_US
site name: Expel
description: Expel is a recognized, leading managed detection and response (MDR) provider offering transparent service and a 17-minute MTTR on high/critical incidents.

Technology

Server: nginx
CMS: WordPress

Analytics

Google Tag Manager
Microsoft Clarity

Ads

Google Ads (DoubleClick)

Cookie consent

OneTrust

Social widgets

Vimeo Embed

Third-party hosts loaded (18)

player.vimeo.com×3
www.googletagmanager.com×2
assets.adoberesources.net×1
bat.bing.com×1
cdn.cookielaw.org×1
cdnjs.cloudflare.com×1
gmpg.org×1
googleads.g.doubleclick.net×1
j.6sc.co×1
js.zi-scripts.com×1
munchkin.marketo.net×1
scripts.clarity.ms×1
snap.licdn.com×1
static.ads-twitter.com×1
static.oktopost.com×1
ws-assets.zoominfo.com×1
www.clarity.ms×1
www.redditstatic.com×1

Social

Contact

Phone

8443973524

Registration

Registrar

Cloudflare, Inc.

Created

1998-11-22

Expires

2032-11-21 2378 days left

Updated

2023-09-08

Name servers

junade.ns.cloudflare.com
nova.ns.cloudflare.com

DNS records live

NS

junade.ns.cloudflare.com
nova.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 16 TXT records

anthropic-domain-verification-44xs4h=8i4WrGTmha7isujjlDYVjhsk5
wiz-domain-verification=6c0cd547d7be718e35aee3d0c96fe8c13f8a4a6b4a46ac11a9f0042bfd33be63
adobe-idp-site-verification=2552c3c705cb41d5ac8c78cbbde79d55b3dc6c4fe352688929e908b9b8d3d579
anthropic-domain-verification-ybpb84=Crd0G4jOornqlGh7j7CIbfjSO
mgverify=d1670a83062670e12b0c54de61d7e2516fa2ad7e332ecafcaba258e9df5cb46c
jamf-site-verification=DB96h20OJXrN7ezeL2HH2Q
uber-domain-verification=a3de8abd-d1d4-435b-87e9-66b7abd90326
google-site-verification=O8EOx_hqyLwm0k4V0Y34BCNidXgpDEMw_j_94xzr5dg
google-site-verification=GV9tzX1NeqRTxgXF8wotJdoYqucbx63GP-CcVWm_ueg
atlassian-domain-verification=QS7eZff04J+oaZtoVt1XYgTHfdzckpoucgnkjMTLi7bTMP8EL/R9Ua9bMLqLhpse
ff588464-fb1c-45bf-ad57-b60a98052fe9
docusign=87004341-808f-4ecd-abed-a4ce7014a2bf
atlassian-sending-domain-verification=16eac773-97f3-4578-b60b-6d41ccc8db51
DirectFedAuthUrl=https://expelsoc.okta.com/app/expelsoc_expelplaygroundentraid_1/exk1w5hqmytQAoE5e1d8/sso/saml
apple-domain-verification=XZxdMrwlBP4gmGLY
docker-verification=da8092fe-f684-45e5-a0a0-093b854a3de6

Email authentication strong

SPF

v=spf1 include:_spf.expel_com._d.easydmarc.pro include:mail.zendesk.com ~all

softfail (~all)

DMARC

v=DMARC1;p=reject;rua=mailto:1896e41aeb@rua.easydmarc.us,mailto:itdmarc@expel.com;ruf=mailto:1896e41aeb@ruf.easydmarc.us,mailto:itdmarc@expel.com;ri=43200;fo=1

policy: reject (enforced)

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9BWMWjM5cNX0gUrgtCG4eiq9tbl1Yriwgl88Gg/usZgSGbZiBNM93g/Nha8L2k7BEb5zYNdQrAlB/0…
dkim: v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2gAtnNzEfzNxLKMcfPJuuFoocS/mMTkSMoCz0ClygNC7Ojqc3aXw1GW+NAIGO9M62EX+lfWTt+/4Eks…

selectors probed

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2026-01-30 to 2027-03-03

Expires in 288 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://expel.com/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy

findings

CSP uses wildcard sources
missing frame protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests; frame-ancestors 'self' https://*.expel.com https://*.mindtickle.com
strict-transport-security: max-age=31622400; includeSubDomains; preload

Links to (5)

Linked from (1)

tldr.tech×1