karat.com

HTML metadata

Title: The world’s leader in technical interviewing | Karat
Description: Karat helps companies hire top engineering talent by improving the quality, efficiency, and equity of their technical hiring process
Language: en-US
Canonical: https://karat.com/

Open Graph

url: https://karat.com/
title: Home
locale: en_US
site name: Karat
description: Karat helps companies hire top engineering talent by improving the quality, efficiency, and equity of their technical hiring process

Technology

CDN: Cloudflare
CMS: WordPress

Cookie consent

OneTrust

Social widgets

Vimeo Embed

Third-party hosts loaded (7)

cdn.cookielaw.org×1
cdn.jsdelivr.net×1
client-registry.mutinycdn.com×1
code.jquery.com×1
js.qualified.com×1
player.vimeo.com×1
unpkg.com×1

Social

Registration

Registrar

NameCheap, Inc.

Created

1995-07-29

Expires

2026-07-28 70 days left

Updated

2024-06-28

Name servers

ns-1295.awsdns-33.org
ns-1800.awsdns-33.co.uk
ns-275.awsdns-34.com
ns-783.awsdns-33.net

DNS records live

NS

ns-1295.awsdns-33.org
ns-1800.awsdns-33.co.uk
ns-275.awsdns-34.com
ns-783.awsdns-33.net

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 29 TXT records

MS=ms30006385
google-site-verification=Uez7jC6_1ozt_zEGbTzxjl20H8UaeQRAojy7hHskrTU
docusign=179f6b27-e213-4091-b4ab-c10e431b1128
asv=fcc0aa6ce7e48047d8069b4a054870be
google-site-verification=b07quWdhqiACxywrqvQC0whIhBOTj6ORQCPzPs8jwpY
figma-domain-verification=a48b0781cef88a1b593889c4e5e633b9346434dfda1a3c2942db04a83d3eb748-1755634846
zapier-domain-verification-challenge=2012c679-7b1a-4058-8cd6-4685ea9a4abc
google-site-verification=cKwukQ08495DSU-Lk2HSuv8x7vilLENUHvCiWReFUVk
google-site-verification=FszeRHE_LXwe-22dQV2jyGoMQpO-EVxjTwlQBuhtD4M
atlassian-domain-verification=VJ7B9JQrG1vY9ZZyhh5yzaSnCNP46G9peFR4G36OkpT54hQXlCJturSMhbWRlFdc
ca3-e5ec656ae8764b298ff487c4d260cf12
Ii1XOMqbf8VxTMu76ymZgBsz9LUu7dgYjZCWxFy8wSY=
google-site-verification=k0Tv1i_elSClbc6rQ_DttfG8d2gwt3Eo1wZqkp0-Wb8
apple-domain-verification=RSGASzDy55IiUGJo
jamf-site-verification=Dt3i5x_6k8vjBk4G6WXXFA
ca3-d4547677be66443e926a2013d5718ab0
anthropic-domain-verification-epahm0=3hFJ2LesjJZ5R3l8mFQRBpGEt
docusign=f90e760a-2355-4894-8c52-c5003fe33551
_gitlab-pages-verification-code.karat.com TXT gitlab-pages-verification-code=7cc5cb9c67f82e3c7a02c7b4ac63166f
cursor-domain-verification-93jztz=YwtnsnFIG6fNmFnkl0Ae2cJtK
slack-domain-verification=1x9Bhhhr2MmG2W1JLnf88OEdFu5CId9BeX8a9PEL
ZOOM_verify_v_qG89U3QJiSPqVqj8s-Ww
pardot859933=633db577f8ab6747a2e86466c43dde518b3db0801557eb78852a65c48b47c8f7
ZOOM_verify_YWCIeH9pQk2ee-bxEautiw
intacct-esk=AE614B8E4345CEC9E0539A220D0AF1DC
docusign=3b85e379-88dd-467e-a926-0b63f700d89a
miro-verification=4719b240aa0e5142c88863db465a1a73202586e5
hubspot-domain-verification=NThhYmU0N2UtYzU2MS00OTQ5LWJjNDMtZTZiNDVkZTY0OGMw
google-site-verification=NBV20Mc59mdb4MGgPdZeIzKPQCLKzyrJh2xfeCazkwg

Email authentication strong

SPF

v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email include:_spf.intacct.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarc_agg@vali.email

policy: quarantine

DKIM

google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCk6WvWOMmzZ4oTU5nHDCBE+JWE7LPvIZWmB20tVyrXtA1BGgWuESRXS675NVU/B0aWslfkLIpVO/7Meh3utF…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCLw9WwVMaDQrjDlq9tvBQ31Wp9EsNa6VBuY+QI/mVEmoBkGjEi1LLWT8hrAKC7N3IBmiZUSBGvCV7Iw8R…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC5CyS46eQ+RKTU/j3ODjW9D6e7XW11BjUUk1Ce3jusCNQ/Gs4z9hsBIhXZu5wA7M668yU0mp8jY5MTvKu25R2hQQ…

selectors probed

Certificate (current)

E8

from 2026-04-26 to 2026-07-25

Expires in 67 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://karat.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
permissions-policy: microphone=(*)
x-content-type-options: nosniff
content-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https: wss:; img-src 'self' data: https:; frame-src 'self' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' https: data:;
strict-transport-security: max-age=63072000
cross-origin-opener-policy: unsafe-none
cross-origin-embedder-policy: unsafe-none; report-to='default'
cross-origin-resource-policy: cross-origin

Links to (6)

Linked from (1)

rugll.org×2