planday.com

HTML metadata

Title: Planday | Employee Scheduling, Time Tracking & Workforce Management Software
Description: Planday helps businesses simplify employee scheduling, time tracking, communication, and staff management—all in one powerful platform. Reduce labour costs, streamline workflows, and build a happier, more efficient workforce.
Language: en

Open Graph

title: Planday — The Smarter Way to Manage Your Workforce
description: Simplify shift scheduling, time tracking, and staff management with Planday’s powerful workforce platform. Build smarter schedules, reduce costs, and keep your team connected—anywhere.

Technology

CDN: Vercel
CMS: Next.js

Analytics

Google Tag Manager

Third-party hosts loaded (4)

eu-central-1-shared-euc1-02.graphassets.com×56
js.storylane.io×1
widget.trustpilot.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

Key-Systems GmbH

Created

2004-05-28

Expires

2027-05-28 374 days left

Updated

2026-05-03

Name servers

ns1-08.azure-dns.com
ns2-08.azure-dns.net
ns3-08.azure-dns.org
ns4-08.azure-dns.info

DNS records live

NS

ns1-08.azure-dns.com
ns2-08.azure-dns.net
ns3-08.azure-dns.org
ns4-08.azure-dns.info

MX

10 aspmx.l.google.com
20 alt1.aspmx.l.google.com
30 alt2.aspmx.l.google.com
40 aspmx2.googlemail.com
50 aspmx3.googlemail.com
60 planday-com.mail.protection.outlook.com

TXT

Show 16 TXT records

ca3-ae1b1cb1c6104705a9e36908b979daf7
google-site-verification=Z2BOFegJdgxHqkaUoWcrkHX7DaHwCgPKh51_99Wha9g
asv=a7f6d7737e8f0a61b5e2e3854d21f4ed
atlassian-domain-verification=4Lha4JpE5bnhxI2bDRY9Ju9jYadbwT57ItPkeM4k5DRthRKKLkAMTMKY1BoYX63X
4363946D89
status-page-domain-verification=d1jqg4vkmc9q
ca3-c3ec2e28e94147ff8a3958cd3e6f76aa
miro-verification=0de49f0e1f9e5ecb3b1cdf6158b6aec948ef7794
r3LbW/H0DHKr6yVNrwTUMryCIVW+WtMjj7EqmkDXV94=
MS=ms28703152
sending_domain1061162=5e0f4aa35df6a7666d380e852c4776e2afb52af7614ac1785644a32cca4fec3f
google-site-verification=8H1qNFT5eeVueEMPmFPKniWdYcAfYw-LuKsU4vF9_oA
Lucid-verification=4p9ImF4AjF1ZFlHqaxxf
google-site-verification=dNUY_MAdjNK6lHl1uGni28WhejriptPItz9h0vSF2Xk
calendly-site-verification=EDPWURZbWmPssu7Otg2B7LIORveDNzMRTFUoWws5e
rovag_verification_token=039A9A068735443CB95E15F8D9FFADE8

Email authentication partial

SPF

v=spf1 ip4:167.89.0.0/17 ip4:208.117.48.0/20 ip4:50.31.32.0/19 ip4:198.37.144.0/20 ip4:198.21.0.0/21 ip4:192.254.112.0/20 ip4:168.245.0.0/17 ip4:149.72.0.0/16 ip4:159.183.0.0/16 ip4:223.165.113.0/24 ip4:223.165.115.0/24 ip4:223.165.118.0/23 ip4:223.165.120.0/23 ip4:205.201.128.0/20 ip4:198.2.128.0/18 ip4:148.105.8.0/21 include:_spf.google.com include:spf.mandrillapp.com include:_spf.mailgun.org include:stspg-customer.com include:zgateway.zuora.com include:_spf.salesforce.com include:amazonses.com ~all

softfail (~all)

DMARC

v=DMARC1;p=none;rua=mailto:DMARCReports@planday.com;pct=100;ruf=mailto:DMARCReports@planday.com;fo=0:d:s;aspf=r;adkim=r;

policy: none (monitoring only)

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg06/0VGa8hUDJsuCO/D52A15zyRJxTseXKZsW8VqFZp2isQiEif+LrnMqf4Szr+wzU7C7Iqf/bbgxX…
selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQD0TdWuGExu3lq6CydJ6hy8MRpTvAhcUZ/krymkjmLTczc6hFCJFDQIMe7q7w8E3S033qjtuZBSXYE4oagWS+…
k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lb19/bfXA8HsSKIFxEA8O0eExmtHL42qX9/uwIlAyGlIsCaOBI748lImwwvDy4H7H3nc5TK0DXp/mjbDp…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvENE9TdI0xqN2K8y3D6noHb/ZeN6MFO3UwjMLb9/kOEQtF5yULT20ONSrH/PB0KohGroH1O1kEJ8vVWmGq…
smtpapi: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76…

selectors probed

Certificate (current)

R13

from 2026-05-02 to 2026-07-31

Expires in 73 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.planday.com/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy

findings

CSP uses wildcard sources
missing frame protection

Header values

referrer-policy: strict-origin-when-cross-origin
permissions-policy: camera=(), microphone=(), geolocation=()
x-content-type-options: nosniff
content-security-policy: font-src 'self' https://fonts.intercomcdn.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://*.hygraph.com;
strict-transport-security: max-age=63072000