safetyculture.com

HTML metadata

Title: SafetyCulture | Improve Workplace Operations
Description: Digitize & improve elements of your operations. Give your teams the knowledge, tools & confidence to work safely & meet higher standards.
Language: en
Canonical: https://safetyculture.com

Open Graph

url: https://safetyculture.com
title: SafetyCulture | Improve Workplace Operations
locale: en_US
site name: SafetyCulture
description: Digitize & improve elements of your operations. Give your teams the knowledge, tools & confidence to work safely & meet higher standards.

Technology

CDN: Cloudflare
CMS: Next.js

Third-party hosts loaded (4)

images.ctfassets.net×14
graphql.contentful.com×2
cdn.contentful.com×1
preview.contentful.com×1

Social

Registration

Registrar

MarkMonitor Inc.

Created

2002-04-25

Expires

2027-04-25 340 days left

Updated

2026-01-13

Name servers

todd.ns.cloudflare.com
yolanda.ns.cloudflare.com

DNS records live

NS

todd.ns.cloudflare.com
yolanda.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 aspmx2.googlemail.com
10 aspmx3.googlemail.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 11 TXT records

atlassian-domain-verification=Aum9OTapUeFpK1GI1/otLwu/3ykkflHpWhp+BOsmuWpYScxkB0lfNkDyBpIL9Lo3
canva-site-verification=51Zfz3vDkwDomR4x96Ot-Q
docusign=e5982d21-9eb4-4e60-af61-8ddf19921d22
google-site-verification=6CHRTA3tDiDsi_b77lCeVgKvFPBhfY--cW5ZQRzGkhw
google-site-verification=CmjSWtYQwDejtssHCpa4P5x52EgVW3JvsE_wbNw5Ha8
google-site-verification=LSci2LdSh16BrCMEds0zAAYtI2IfbB_J9zKOadHjBDc
google-site-verification=WbdvYpjxgG_w20ah8Id1W4eBHR1CELhMEuv0R1-PbnI
google-site-verification=cakgcf7Y0lN_1QODtVJeIJ3Qz_EymGFBu3OTVo8IneA
notion-domain-verification=HSnAcwUZfjPIxDsvXszBhNgwlIJVhaGj79pFX42r86x
statuspage-domain-verification=jvsztzvwl9mm
zapier-domain-verification-challenge=445b3865-489d-43d2-b242-a3e25340a343

Email authentication strong

SPF

v=spf1 include:_spf.google.com include:spf.mandrillapp.com include:sendgrid.net include:amazonses.com include:mailsenders.netsuite.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; sp=quarantine; pct=100; aspf=r; fo=1; ri=3600; rua=mailto:544f6afa5307460bb87eb87992bc117e@dmarc-reports.cloudflare.net;

policy: quarantine · sp=quarantine

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RomUB9SeI2YKNCculGimrDwYAYsUXRdN9yOsEb0DYL1hl9IuqQeq7dMMYg15BQpeNcyHYVb4VIwuR…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+cqCYSJ7Hsgz+DBhOGtD0L99rEZQsWPEyUAuj+U5K6rRIEBib+PP3a43Nmh20kWUZJ7S8QDI94lTVrsHr…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDOaOoJvejGS2HkANNFjGVAshNevJch/By+C5iUIVECfHB7+hDIIkr5E57QVY94b/pCThGOpqbCtQVi28f/lZAMvO…

selectors probed

Certificate (current)

E8

from 2026-05-17 to 2026-08-15

Expires in 88 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://safetyculture.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: camera=(), microphone=(), geolocation=(), unload=(self)
x-content-type-options: nosniff
content-security-policy: base-uri 'self'; connect-src 'self' https://graphql.contentful.com https://preview.contentful.com https://app.contentful.com https://cdn.contentful.com https://assets.ctfassets.net https://www.facebook.com https://graph.facebook.com *.sentry.io/ https://amplitude.com https://api.amplitude.com https://api-sr.amplitude.com https://cdn.amplitude.com https://sr-client-cfg.amplitude.com https://*.segment.com https://*.segment.io https://cdn.segment.com https://cdn.madkudu.com https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://region1.analytics.google.com https://region1.google-analytics.com https://www.google.com https://google.com https://www.google.com/ccm/ https://*.google.com https://google.com/pagead/ https://www.google.com/pagead/ https://pagead2.googlesyndication.com https://td.doubleclick.net https://stats.g.doubleclick.net https://tracking.g2crowd.com https://tracking.g2crowd.com/attribution/tracking/ https://tracking-api.g2.com 1
strict-transport-security: max-age=15552000; includeSubDomains; preload