opsfolio.com

HTML metadata

Title: Opsfolio - Compliance as a Service | SOC2, HIPAA, ISO Certification
Description: Get SOC2, HIPAA, ISO certified fast with expert-guided compliance. 98% audit pass rate, 60% faster than DIY. Your Compliance System of Record.
Language: en
Generator: Astro v5.12.4
Canonical: https://opsfolio.com/

Open Graph

url: /
title: Opsfolio - Compliance as a Service | SOC2, HIPAA, ISO Certification
site name: Opsfolio
description: Get SOC2, HIPAA, ISO certified fast with expert-guided compliance. 98% audit pass rate, 60% faster than DIY. Your Compliance System of Record.

Technology

Server: openresty

Analytics

Google Tag Manager

Third-party hosts loaded (2)

lhcforms-static.nlm.nih.gov×4
www.googletagmanager.com×1

Social

Contact

Phone

(202) 681-7862

Registration

Registrar

Cloudflare, Inc.

Created

2016-01-07

Expires

2027-01-07 232 days left

Updated

2025-11-24

Name servers

cameron.ns.cloudflare.com
lorna.ns.cloudflare.com

DNS records live

NS

cameron.ns.cloudflare.com
lorna.ns.cloudflare.com

MX

1 opsfolio-com.mail.protection.outlook.com

TXT

google-site-verification=u8gP7_Smt7g91b2xk3AEmeERw8GOW1AhcZvcbQaLFyc
MS=ms64659626

Email authentication strong

SPF

v=spf1 +ip4:162.241.24.23 +include:mailgun.org ip4:44.202.169.34 include:spf.protection.outlook.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc-status@netspective.com;

policy: reject (enforced)

DKIM

default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oWCKJnXzLHV0GZYyDPVY7yoOGEMDrC/xZAM6HSDErJf6ba36ladFTWrvA6OC3W24yge58WIMwkl4O…

selectors probed

Certificate (current)

E8

from 2026-04-06 to 2026-07-05

Expires in 46 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://opsfolio.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
permissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), browsing-topics=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob: https:; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' https: 'unsafe-inline' 'sha256-oT48Pr/jNn+NHRCEzUqTwnDhV1forJugtay0H4WmIDk=' 'sha256-eIXWvAmxkr251LJZkjniEK5LcPF3NkapbJepohwYRIc=' 'sha256-p9VbHs/ClkQc+x63XdUjvCAgeWxA4ZGvpebJtMn9jbs=' 'sha256-N495nGyQGGBNiBozPnkmx1rJhF063Jdh+looQKs6C/I=' 'sha256-6sq9ziaxD2vHqi1ygYTxs4+i3lbDnGnFIb1DuMMyo3U=' 'sha256-U7a72oKuFFz8D7GUHLA1NZ0ciymHmDOc9T9aVDg2rWU=' 'sha256-fDYeTC+QfIWybmtdD+Mm+By3Nu0rmReKAFHu+3O3rAM=' 'sha256-QzWFZi+FLIx23tnm9SBU4aEgx4x8DsuASP07mfqol/c=' 'sha256-3ghQxXEXhjgeev/OxSmWBPWBKe8aZJYDMYph/Wz//tI='; script-src 'self' https: 'unsafe-inline' https://www.google.com https://www.gstatic.com ...; frame-src 'self' https://nta.opsfolio.com https://www.youtube.com https://www.youtube-nocookie.com https://drive.google.com https://www.google.com https://www.gstatic.com; c
strict-transport-security: max-age=31536000; includeSubDomains; preload