terraprovider.com

HTML metadata

Title: TerraProvider: Config as Code for Microsoft 365 Policies | TerraProvider
Description: TerraProvider manages policy configurations for Microsoft 365 tenants via a Terraform provider using Graph API.
Language: en
Canonical: https://www.terraprovider.com/

Open Graph

url: https://www.terraprovider.com/
title: TerraProvider: Config as Code for Microsoft 365 Policies
locale: en
site name: TerraProvider
description: TerraProvider manages policy configurations for Microsoft 365 tenants via a Terraform provider using Graph API.

Technology

CDN: Cloudflare
CMS: Nuxt
JS framework: Nuxt

Analytics

Cloudflare Insights

Third-party hosts loaded (3)

res.cloudinary.com×53
gdpr.c4a8.net×2
static.cloudflareinsights.com×2

Social

Registration

Registrar

Hetzner Online GmbH

Created

2024-08-05

Expires

2026-08-05 65 days left

Updated

2026-05-15

Name servers

ganz.ns.cloudflare.com
ursula.ns.cloudflare.com

DNS records live

NS

ganz.ns.cloudflare.com
ursula.ns.cloudflare.com

MX

1 smtp.google.com

Verified for

Google
Microsoft 365

Email authentication strong

SPF: v=spf1 include:email.freshdesk.com include:spf.mandrillapp.com -all
strict (-all)
DMARC: v=DMARC1; p=reject; sp=reject; adkim=s; aspf=r
policy: reject (enforced) · sp=reject
DKIM: no key found at common selectors

Certificate (current)

E8

from 2026-05-15 to 2026-08-13

Expires in 73 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.terraprovider.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; base-uri 'self'; font-src 'self' data: *.cloudfront.net; form-action 'self'; img-src 'self' data: res.cloudinary.com i1.ytimg.com; object-src 'none'; style-src 'self' https: 'unsafe-inline'; script-src-attr 'self' 'unsafe-inline'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.youtube.com *.youtube-nocookie.com *.cloudfront.net *.cloudcannon.com ajax.googleapis.com *.googletagmanager.com gdpr.c4a8.net *.googleadservices.com *.googlesyndication.com *.doubleclick.net *.licdn.com static.cloudflareinsights.com; frame-src *.youtube.com *.youtube-nocookie.com *.googlesyndication.com; media-src 'self'; connect-src 'self' *.google-analytics.com gdpr.c4a8.net cloudflareinsights.com
strict-transport-security: max-age=0; includeSubDomains; preload