kelio.nl

HTML metadata

Title

Europees marktleider op het gebied van planning, tijdregistratie en toegangscontrole

Language

nl

Canonical

https://www.kelio.nl/

Translations

fr ×4
de ×2
en ×2
nl ×2
es
pt

Technology

Analytics

Google Tag Manager

Fonts

Google Fonts

Social widgets

YouTube Embed

Third-party hosts loaded (14)

static-prod.bodet.com×9
img.youtube.com×4
www.kelio.com×4
www.youtube-nocookie.com×4
fonts.googleapis.com×2
fonts.gstatic.com×2
static-prod.kelio.com×2
www.kelio.be×2
www.kelio.ch×2
www.gestao-rh.pt×1
www.googletagmanager.com×1
www.kelio.co.uk×1
www.kelio.de×1
www.kelio.es×1

Social

Contact

Phone

070-364 38 56

Address

Westvlietweg 68R, 2495 AA, Den Haag, NL

DNS records live

NS

ns1.safebrands.fr
ns2.safebrands.eu
ns3.safebrands.com
ns4.safebrands.org
ns5.safebrands.tech

MX

10 vade-mx-fr01.hornetsecurity.com
10 vade-mx-fr02.hornetsecurity.com
20 vade-mx-eu-fallback01.hornetsecurity.com
20 vade-mx-eu-fallback02.hornetsecurity.com

TXT

hubspot-developer-verification=ZTQyYzJhYTMtZGJlZi00ZWM0LTk4YmQtMmU5NjZkZTM2ZWFi
hubspot-developer-verification=N2JhNTIzODYtYzcxNi00MjlhLTg5ZjctZGVmMDI3NTVjOTc2

Verified for

Brevo
Google
Microsoft 365

Email authentication partial

SPF: v=spf1 include:eskerondemand.com include:spf.protection.outlook.com include:amazonses.com include:spf.hornetsecurity.com include:8073378.spf01.hubspotemail.net include:spf.mailjet.com ~all
softfail (~all)
DMARC: v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

R13

from 2026-04-15 to 2026-07-14

Expires in 42 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.kelio.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://static-prod.bodet.com https://static-prod.kelio.com https://static-prod.kelio.nl https://t.kelio.nl https://*.clarity.ms https://c.bing.com 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://snap.licdn.com https://api.salesfeed.com/v3/ https://js.hsadspixel.net https://js.hscollectedforms.net https://js.hs-banner.com https://js.hs-scripts.com https://js.hs-analytics.net https://unpkg.com/@popperjs/core@2.11.6/dist/ https://unpkg.com/tippy.js@6.3.7/dist/ https://scripts.clarity.ms/ https://snap.licdn.com https://cdnjs.cloudflare.com/ajax/libs/codemirror/ https://www.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com https://*.googletagmanager.com https://www.googleadservices.com https://www.google.com https://googleads.g.doubleclick.net https://static-prod.bodet.com https://static-prod.kelio.com https://static-prod.kelio.nl https://sdk.privacy-center.org https://pagead2.googlesyndication.com https://www.google
strict-transport-security: max-age=31557600