toucantoco.com

HTML metadata

Title

Toucan | AI-Powered Embedded Analytics

Description

AI-powered embedded analytics for ISVs and SaaS. Ship white-label, conversational analytics into your product in days. Trusted by 350+ companies.

Language

en

Generator

HubSpot

Canonical

https://www.toucantoco.com/en/

Translations

en
fr

Open Graph

url: https://www.toucantoco.com/en/
title: Toucan | AI-Powered Embedded Analytics
description: AI-powered embedded analytics for ISVs and SaaS. Ship white-label, conversational analytics into your product in days. Trusted by 350+ companies.

Technology

CDN: Cloudflare
jQuery: 1.11.2 known XSS (<3.5)

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (5)

fonts.googleapis.com×6
cdnjs.cloudflare.com×2
www.googletagmanager.com×2
js.hubspot.com×1
static.claydar.com×1

Social

Contact

Email

go@toucantoco.com

Address

Paris, FR

Registration

Registrar

Gandi SAS

Created

2014-01-19

Expires

2027-01-19 231 days left

Updated

2025-12-19

Name servers

ns-145-b.gandi.net
ns-213-c.gandi.net
ns-80-a.gandi.net

DNS records live

NS

ns-145-b.gandi.net
ns-213-c.gandi.net
ns-80-a.gandi.net

MX

10 aspmx.l.google.com
20 alt1.aspmx.l.google.com
20 alt2.aspmx.l.google.com
30 aspmx2.googlemail.com
30 aspmx3.googlemail.com

TXT

mistral-domain-verification=b2abd7ff65ad5b71c434cb8d74746f07a1ad047c
MS=06D2C9DA0B0A71124CB98A848779AA5139C9FED7

Verified for

Cisco
Google
Loader.io

Email authentication strong

SPF

v=spf1 include:_spf.google.com include:servers.mcsv.net include:spf.mailjet.com include:sendgrid.net include:spf.autopilothq.com include:helpscoutemail.com include:_spf.salesforce.com include:m.lessonly.com include:8414155.spf05.hubspotemail.net ?all

neutral (?all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:infra+dmarc@toucantoco.com

policy: quarantine

DKIM

Show 5 DKIM selectors

google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCRTL/Vr1YTNhRmvtvvnKYFZd5owdkfXbuGkv3gJlI/kKAf8lzX5SraXftXPhWmFKea5WJN6ZpKVxYT2/6ExN…
k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEPp9rymoc/enGHNtBEYg+kUt4WHTUQKMpZAqsm1BDca1YGR9/N/Id5Z0wtDWxir7h8WHuxwP+Yv/tQuLX…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC7fLwy9Yclld7GzxAzUBWsQ933Xcfm55gRYt8hspeNCuLJa+vfkwDGzX9XCniLXYp50MdplpkAT0RLn5pGM8x0da…
smtpapi: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76…

selectors probed

Certificate (current)

R13

from 2026-04-09 to 2026-07-08

Expires in 36 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.toucantoco.com/en/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

short HSTS max-age
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'none'; upgrade-insecure-requests
strict-transport-security: max-age=3628800; includeSubDomains