stantec.com

HTML metadata

Title

Stantec

Description

Stantec is a global leader in sustainable engineering, architecture, and environmental consulting. With every community, we redefine what’s possible.

Language

en

Canonical

https://www.stantec.com/en

Translations

ar-sa
en-au
en-gb
en-nz
en-us
es-es
fr-fr
it-it
nl-nl
tr-tr
zh
zh-cn
zh-tw

Open Graph

url: https://www.stantec.com/en
title: Stantec
description: Stantec is a global leader in sustainable engineering, architecture, and environmental consulting. With every community, we redefine what’s possible.

Technology

CDN: Akamai
Server: Apache
CMS: Gatsby

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (2)

fonts.gstatic.com×1
www.googletagmanager.com×1

Social

Contact

Email

media@stantec.com

Phone

1-866-782-6832

Address

Phone:1-866-782-6832Media Requests:media@stantec.com

Registration

Registrar

MarkMonitor Inc.

Created

1998-08-18

Expires

2034-08-17 3012 days left

Updated

2025-06-06

Name servers

ns1.stantec.com
ns2.stantec.com

DNS records live

NS

ns1.stantec.com
ns2.stantec.com

MX

10 stantec-com.mail.protection.outlook.com

TXT

Show 19 TXT records

atlassian-domain-verification=YgwpdX31kl1OxoVBaZ3nZa1VCIGhuMga2nGOwnmuoVGpbSgEnvsNNX7OQCcneLMM
9b8290369076482381fb28e817ff943d
docker-verification=6f35e8d4-7db9-4934-bb99-c6986883dce0
ecostruxure-it-verification=57b31498-dbfe-47f2-a01b-321522ea8713
v=spf1 a:mail.stantec.com a:mail13.stantec.com include:spf.protection.outlook.com include:47147980.spf03.hubspotemail.net include:_spf.qemailserver.com include:_spf.eploy.net include:mail.zendesk.com include:spf.afas.online ~all
google-site-verification=PDWu6CDdMiGc9V6fJ-gm8H9xS1ke_fOvgUD83ZmF7js
c3RhbnRlYw==
apple-domain-verification=myW5UEUIgS4rrskL
google-gws-recovery-domain-verification=66873241
ciscocidomainverification=5f138ce1af2b64edacdb498fde53683f22af941df58283161e2807cd2abb975b
miro-verification=9af6047a291d0396cbcc57343aee7af92103f3a4
box-domain-verification=2ae4142e5ef204e3dafde6d9da988bbd796cc7bf12c90d53f3f209dc89b56395
nearmap-domain-verification=a7bb8eb9e24fb90acc01c3075010670f32c6d43310c07574653b99cefcecffa2
adobe-idp-site-verification=6c31ad5a-ef01-4722-aa7a-cd6546463f2d
unity-sso-verification=f13e8996-653a-45c1-8cb6-f7a720196260
MS=ms46214785
atlassian-domain-verification=mIp1G5Kw9Vmv7TA3s/sFZ5Nd+tJ5T3W1tON4TKQyh8/pP9YmnPQtGnhRckMdEkqO
google-site-verification=BCYIHyPlonKly38nBu-CQhroW2_ODfwm1fDEu4_noNg
logmein-verification-code=0d2cedc4-c1ad-491d-a140-5915805cd9c2

Certificate (current)

RapidSSL TLS RSA CA G1

from 2025-11-17 to 2026-11-03

Expires in 168 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.stantec.com/en

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=*, autoplay=*, camera=*, cross-origin-isolated=*, display-capture=*, encrypted-media=*, fullscreen=*, geolocation=*, gyroscope=*, keyboard-map=*, magnetometer=*, microphone=*, midi=*, payment=*, picture-in-picture=*, publickey-credentials-get=*, screen-wake-lock=*, sync-xhr=*, usb=*, web-share=*, xr-spatial-tracking=*, clipboard-read=*, clipboard-write=*, gamepad=*
x-content-type-options: nosniff
content-security-policy: default-src 'self'; frame-ancestors 'self'; font-src 'self' https:; img-src 'self' data: https:; script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https: ;form-action 'self' https://*.hsforms.com; object-src 'none'; base-uri 'self'; script-src-elem 'self' 'unsafe-inline' https://js.hsadspixel.net https://js.hs-banner.com https://js.hscollectedforms.net https://js.hs-analytics.net http://*.googletagmanager.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://*.go-mpulse.net https://siteimproveanalytics.com https://secure.iron0walk.com https://*.cookielaw.org https://*.marketo.com https://snap.licdn.com https://*.google.com https://*.doubleclick.net https://*.onetrust.com https://*.akstat.io https://*.akamaihd.net https://*.youtube.com https://*.facebook.com https://*.facebook.net https://*.mktoresp.com https://*.clarity.ms https://*.marketo.net https://*.lfeeder.com https://*.intentsify.io https://*.discover.com https://*.ceros.com https://*.ceros.site
strict-transport-security: max-age=31536000; includeSubDomains; preload