overjet.com

HTML metadata

Title: Overjet - The #1 Dental AI Platform for Providers & Payers
Description: Overjet is the #1 dental AI company that supports DSOs, dentists, dental groups, insurance companies and health plans on their quest to improve oral health.
Language: en

Open Graph

url: https://overjet.com
title: Overjet - The #1 Dental AI Platform for Providers & Payers
site name: OVERJET
description: Overjet is the #1 dental AI company that supports DSOs, dentists, dental groups, insurance companies and health plans on their quest to improve oral health.

Technology

CDN: Vercel
CMS: Next.js

Analytics

Google Tag Manager

Third-party hosts loaded (9)

a-us.storyblok.com×52
www.googletagmanager.com×3
client-registry.mutinycdn.com×1
js-na1.hs-scripts.com×1
js.adsrvr.org×1
px.ads.linkedin.com×1
static.claydar.com×1
tag.pearldiver.io×1
www.facebook.com×1

Social

Contact

Address: 200 State St, STE 1220, 02109, Boston, MA, US

Registration

Registrar

Cloudflare, Inc.

Created

2003-05-22

Expires

2029-05-22 1099 days left

Updated

2025-04-21

Name servers

ed.ns.cloudflare.com
walk.ns.cloudflare.com

DNS records live

NS

ed.ns.cloudflare.com
walk.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 13 TXT records

notion_verify_94N+,h}qB0mf6hA_PXTvCe)KTTQ!]]vzf+i3tpC1chZZzfBh+X!TcKng0qJ%7kuV*:=%6@
12993808
ahrefs-site-verification_c004c9f51921fab010538350bee44757be29503fb7c392aa9c443acaa58ce217
amazon-business-verification=0b6ee9930433a73c9e9a8c581e9432969c5f37ef698def4a06ab643519366412
anthropic-domain-verification-b6swc5=O8N3MGDH4CeEi0aMRYx5hzfwI
docusign=8d6b8402-1fd7-4bc0-a26b-4a23860744ad
firebase=practiceanalytics-prod
google-site-verification=46ZCI3UBg3y2GG2Ue5M5bgyDf6ACZ_WVbrE7sBBTcbc
google-site-verification=5LDwTdvwWqWNgdO4_A56scym3JLKFMycTvRJa4ua5xY
google-site-verification=JIaA5rGMZUoUSNiM_i10JN8bKGubiCbkpprvF6VHKWU
google-site-verification=Paq07NDkDEl7OUtQgLzRPa-C1gwXPpueLlnheOWRFss
google-site-verification=VNMepksJNl0VZGGuvu_qHzmMf2JqkQ8yRL-Hi0VaLfQ
google-site-verification=ik5Hmrn0vou7yC0vV32AItR41G5aqnLw6ZYNW-TajeU

Email authentication strong

SPF

v=spf1 include:_spf.firebasemail.com include:_spf.google.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarc@overjet.ai

policy: quarantine

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk6zAbaiXC/oThVPeZdvtGOx3oqI3Vw+8J/XpuU4kGf7ZKyC2aMXw1/YTBaNWjZq/liHPgzpU7bCu5…

selectors probed

Certificate (current)

R13

from 2026-05-03 to 2026-08-01

Expires in 74 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.overjet.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://assets.calendly.com https: http://js.hs-scripts.com https://js.hs-scripts.com https://js.howdygo.com; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https: wss: https://ldc.a.usbrowserspeed.com; frame-src 'self' https://calendly.com https://app.storyblok.com/ https://vercel.live/ https://tag.trovo-tag.com/ https://forms.hsforms.com/ https://insight.adsrvr.org/ https://www.youtube.com https://youtube.com https://youtu.be https://overjet.tourial.com https://app.hubspot.com https://app.howdygo.com https://embed.podcasts.apple.com https://www.loom.com https://loom.com https://*.loom.com https://overjet.com https://*.overjet.com https://a-us.storyblok.com https://*.storyblok.com https://s3.amazonaws.com https://drive.google.com https://docs.google.com; media-src 'self' https://www.youtube.com https://youtube.com https://youtu.be https://*.storyb
strict-transport-security: max-age=31536000; includeSubDomains; preload