pactflow.io

HTML metadata

Title

Comprehensive Contract Testing | Swagger

Description

Fast, easy, and reliable testing for your APIs and microservices at scale.

Language

en

Generator

Ghost 2.25

Canonical

https://pactflow.io/

Feeds

Pactflow Contract Testing Platform RSS

Open Graph

url: https://pactflow.io/
title: Pactflow Contract Testing Platform
site name: Pactflow Contract Testing Platform
description: Fast, easy and reliable testing for your APIs and microservices at scale

Technology

CMS: Ghost

Analytics

Google Tag Manager

Ads

Google Ads
Google Ads (DoubleClick)

Third-party hosts loaded (9)

fast.wistia.com×2
www.googletagmanager.com×2
cdn-4.convertexperiments.com×1
googleads.g.doubleclick.net×1
stats.g.doubleclick.net×1
www.facebook.com×1
www.google.com×1
www.google.com.au×1
www.googleadservices.com×1

Social

DNS records live

NS

ns-1438.awsdns-51.org
ns-151.awsdns-18.com
ns-1671.awsdns-16.co.uk
ns-637.awsdns-15.net

MX

0 us-smtp-inbound-1.mimecast.com
10 us-smtp-inbound-2.mimecast.com

TXT

Show 4 TXT records

0ed1fe018a560420c397044faca197a51f15971914
MS=ms50817528
detectify-verification=a9c448fa29ff930bda8e2cfc14eb22ce
google-site-verification=2Up-gV6QezJ8W9Y9ysVWnnQTZFqIBGXPXC4Ncj_T5NM

Email authentication strong

SPF

v=spf1 include:us._netblocks.mimecast.com include:spf.protection.outlook.com include:servers.mcsv.net include:sendgrid.net include:amazonses.com include:email.chargebee.com include:mailgun.org ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; rua=mailto:77d47021d410981@rep.dmarcanalyzer.com; ruf=mailto:77d47021d410981@for.dmarcanalyzer.com; fo=1:d:s

policy: reject (enforced)

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl+Kbgn3hsuESvru7qRmHrFBiLDDUxpzuP1tEJnC9IVUsH5r4tdldnsQ6jWAdUdPcyl1tJcHbfsWxS…
k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

Amazon RSA 2048 M04

from 2025-08-17 to 2026-09-16

Expires in 119 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://pactflow.io/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-inline' https:; frame-src 'self' https://*.pactflow.io https://boards.greenhouse.io https://*.youtube.com https://*.twitter.com https://js.driftt.com https://*.hsforms.com https://*.google.com https://*.hotjar.com https://*.hubspot.com https://*.chargebee.com https://*.facebook.com http://*.smartbear.com https://*.smartbear.com https://*.doubleclick.net https://*.cookiehub.net https://*.cookiehub.eu https://*.crazyegg.com https://*.convertexperiments.com https://*.wistia.com https://documentcloud.adobe.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' about: data: https: www.googleadservices.com https://*.hsforms.cohm https://*.crazyegg.com https://*.convertexperiments.com https://*.wistia.com https://assets.adoberesources.net https://documentcloud.adobe.com; style-src 'self' 'unsafe-inline' https://*.chargebee.com https://*.mailchimp.com https://*.smartbear.com https://js.driftt.com https://*.cookiehub.net https://*.cookiehub.eu https://*.crazyegg.com ht
strict-transport-security: max-age=10368000; includeSubdomains; preload

Links to (6)

Linked from (1)

pact.io×3