resume.io

HTML metadata

Title

Free Resume Builder: Make & Download Easily · Resume.io

Description

Join the top 2% with our field-tested templates, easy-to-use resume builder, and powerful career tools. Create a standout resume in minutes and land your dream job.

Language

en

Canonical

https://resume.io/

Translations

en ×4
de ×3
es ×3
pt ×2
bg
cs
da
el
fi
fr
hu
it
ja
nb
nl
pl
ro
sr
sv

Open Graph

url: https://resume.io/
title: Free Resume Builder: Make & Download Easily
description: Free online resume builder, allows you to create a perfect resume minutes. See how easy it is to create an amazing resume and apply for jobs today!

Technology

CDN: Amazon CloudFront
CMS: Joomla

Analytics

Google Tag Manager

Third-party hosts loaded (27)

cv.dk×1
cvapp.bg×1
cvapp.cl×1
cvapp.cz×1
cvapp.de×1
cvapp.es×1
cvapp.fi×1
cvapp.fr×1
cvapp.gr×1
cvapp.hu×1
cvapp.ie×1
cvapp.it×1
cvapp.mx×1
cvapp.no×1
cvapp.nz×1
cvapp.ro×1
cvapp.rs×1
cveasy.pl×1
cvkungen.se×1
cvster.nl×1
dev.visualwebsiteoptimizer.com×1
lebenslaufapp.at×1
lebenslaufapp.ch×1
onlinecurriculo.com.br×1
onlinecurriculo.pt×1
rirekisho.jp×1
www.googletagmanager.com×1

Social

Contact

Email

privacy@resume.io

DNS records live

NS

ns-1049.awsdns-03.org
ns-1569.awsdns-04.co.uk
ns-333.awsdns-41.com
ns-742.awsdns-28.net

MX

1 resume-io.mail.protection.outlook.com
10 mx.transip.email

Verified for

Ahrefs
Apple
Google
Meta
Microsoft 365
OpenAI
Pinterest

Email authentication strong

SPF

v=spf1 a mx ip4:168.245.65.255 ip4:168.245.115.120 include:sendgrid.net include:_spf.google.com include:emsd1.com include:spf.protection.outlook.com include:_spf.transip.email ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; sp=none; pct=100; ri=86400; rua=mailto:support@resume.io

policy: reject (enforced) · sp=none

DKIM

Show 4 DKIM selectors

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzVjGMdqeWYcm2wmPMBtstTUuqultipdQk02FSLXeIm8ETmBjG3B4ZZ8wzsyfhu8HyDgMR24S/xt79…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzT/a8rLgo/8vs9T9YGhwDOoa1R/PLwMKidDO7qN47HMyWX2ITlTsmaITaxx2s6MOd4iwU/WHsNxLBZfKRD…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDBcMC0Q8/t6Szr3JePX7SDY4mENKy9YRXAZp6vk7u+VW8ucUw6WxFN6OTR51MbxPqpGxU/18ZtmyDzLsmEAJ1hZ3…
smtpapi: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76…

selectors probed

Certificate (current)

Amazon RSA 2048 M04

from 2026-03-19 to 2026-10-03

Expires in 120 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://resume.io/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' * data: blob:; connect-src 'self' * data: blob: webpack:; img-src 'self' * 'unsafe-inline' data: blob:; script-src 'self' * 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' * 'unsafe-inline' data: blob:; object-src 'none'; worker-src 'self' data: blob: career.io *.career.io careerio.careerminds.com *.careerio.careerminds.com careerio.topcv.com *.careerio.topcv.com careerio.topresume.com *.careerio.topresume.com careers.chegg.com *.careers.chegg.com careers.coursereport.com *.careers.coursereport.com careers.nscs.org *.careers.nscs.org cv.dk *.cv.dk cvapp.ar *.cvapp.ar cvapp.bg *.cvapp.bg cvapp.cl *.cvapp.cl cvapp.cz *.cvapp.cz cvapp.de *.cvapp.de cvapp.es *.cvapp.es cvapp.fi *.cvapp.fi cvapp.fr *.cvapp.fr cvapp.gr *.cvapp.gr cvapp.hu *.cvapp.hu cvapp.ie *.cvapp.ie cvapp.it *.cvapp.it cvapp.mx *.cvapp.mx cvapp.no *.cvapp.no cvapp.nz *.cvapp.nz cvapp.ro *.cvapp.ro cvapp.rs *.cvapp.rs cvapp.vn *.cvapp.vn cveasy.pl *.cveasy.pl cvkungen.se *.cvkungen.se cvster.nl *.c
strict-transport-security: max-age=31536000; includeSubDomains; preload