frox.ch

HTML metadata

Title

Spezialisten für Service Management und Prozessautomatierung

Description

Enterprise Service Management (ESM) ✓ ITSM ✓ CSM✓ Digitale Transformation ✓ Prozessdigitalisierung ✓ Proessautomatisierung (BPM)

Language

de-DE

Generator

WordPress 6.9.4

Canonical

https://www.frox.ch/

Translations

de
en

Feeds

Open Graph

url: https://www.frox.ch/
title: Home FROX: Experten für Service Management und Prozessautomatisierung
locale: de_DE
site name: FROX
description: Seit über 25 Jahren unterstützt FROX Unternehmen mit innovativen Lösungen und fundierter Expertise, um effiziente IT- und Geschäftsprozesse durch Automatisierung und optimales Service Management zu gewährleisten.
locale:alternate: en_GB

Technology

Server: Apache
CMS: WordPress 6.9.4
jQuery: 3.7.1

Analytics

Google Tag Manager

Third-party hosts loaded (4)

cdn.jsdelivr.net×1
gmpg.org×1
js.hsforms.net×1
www.googletagmanager.com×1

Social

Contact

Email

office@frox.ch

Phone

+41 55 254 12 54

DNS records live

NS

ns1.frox.ch
ns2.frox.ch

MX

5 frox-ch.mail.protection.outlook.com

Verified for

Atlassian

Email authentication partial

SPF

v=spf1 mx ip4:94.176.192.159 ip4:212.103.82.234 ip4:94.176.192.82 ip4:94.176.192.83 ip4:94.176.192.192 ip4:94.176.192.193 include:spf.protection.outlook.com include:spf.abacuscity.ch include:spf.mailjet.com include:2363227.spf10.hubspotemail.net -all

strict (-all)

DMARC

v=DMARC1; p=none; adkim=r; aspf=r

policy: none (monitoring only)

DKIM

smtpapi: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCpZ/4o5lLn/7auaNWthbzzfx/mDGP0+qIwH6nnkMvevqXVZwojJNxBWF4AOWoYYk4DlizIXF6GkNEDPcttjlntQCHYY0M…

selectors probed

Certificate (current)

R13

from 2026-05-02 to 2026-07-31

Expires in 71 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.frox.ch/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection

Header values

referrer-policy: same-origin
permissions-policy: geolocation=(),midi=(),notifications=(),push=(),sync-xhr=(),accelerometer=(),gyroscope=(),magnetometer=(),payment=(),camera=(),microphone=(),usb=(),xr=(),speaker=(self),vibrate=(),fullscreen=(self)
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self'; object-src 'none'; worker-src blob: 'self'; connect-src 'self' *.hsforms.com *.hsforms.net *.youtube.com https://www.googletagmanager.com https://www.gstatic.com https://cdn.cookielaw.org https://cookie-cdn.cookiepro.com *.hotjar.com *.hotjar.io wss://ws.hotjar.com https://www.google-analytics.com https://www.google.com https://code.jquery.com *.onetrust.com *.linkedin.com *.googleapis.com *.hs-analytics.net *.hs-banner.com *.hs-scripts.com *.cloudflareinsights.com *.licdn.com *.hubspot.com https://js.hsadspixel.net https://cdn.jsdelivr.net https://secure.365insightcreative.com https://api.hubapi.com https://a.usbrowserspeed.com *.doubleclick.net; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.hsforms.com *.hsforms.net *.youtube.com https://www.googletagmanager.com https://www.gstatic.com https://cdn.cookielaw.org https://cookie-cdn.cookiepro.com *.hotjar.com *.hotjar.io wss://ws.hotjar.com https://www.google-analytics.com https://www.google.com https://code
strict-transport-security: max-age=31536000; includeSubDomains; preload