traefik.io

HTML metadata

Title: Run APIs Easily. Anywhere. | Traefik Labs
Description: Cloud-native, GitOps-driven API runtime solutions for demanding DevOps and Platform Engineers with diverse use-cases, environments, and deployment models.
Language: en
Canonical: https://traefik.io/

Open Graph

url: https://traefik.io/
title: Run APIs Easily. Anywhere. | Traefik Labs
site name: Traefik Labs
description: Cloud-native, GitOps-driven API runtime solutions for demanding DevOps and Platform Engineers with diverse use-cases, environments, and deployment models.

Technology

CDN: Cloudflare
CMS: Next.js

Social

DNS records live

NS

adel.ns.cloudflare.com
cody.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 4 TXT records

mongodb-site-verification=6YDCQapg2iTHfwz4eQktqcY0xXmThd9Z
MS=ms26818319
google-site-verification=QTFtwuEzgIiis_e1D-QjkmOfL18W6eEs-L-3aGLWQSM
google-site-verification=VPqcyakvn6RtujGckJgkZAQgoMvVp8V8v94iU9ebSWw

Email authentication strong

SPF

v=spf1 include:_spf.google.com include:sendgrid.net include:mail.zendesk.com include:spf.mandrillapp.com include:5814022.spf08.hubspotemail.net ~all

softfail (~all)

DMARC

v=DMARC1;p=reject; rua=mailto:dmarc_agg@vali.email

policy: reject (enforced)

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/0+lxEgMwBVo+6lCNUDjEw0ez6w6LlsSKUM7Q1XtfVgclo7HKokvAirfjF0Ar7qUyn6RC1XQs7IhA…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3KMpqkGSIDvIIPKhqjulUjhAIOb2u7whLb+tf9mM5tsPaRlmcfGiPQmdzOkhv/zDagnO9OPdCDJFWICkV…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQZcPb6jJcEOcUZ8Cc9eJYAWAfWb//xIpudGcvLCZOutMjOZP2hRrvQV94FMbKr3TaxmjBb6yXHWTgmiufidGiQj…

selectors probed

Certificate (current)

WE1

from 2026-04-18 to 2026-07-17

Expires in 59 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://traefik.io/

present

strict-transport-security
content-security-policy-report-only
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

missing Content Security Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: sameorigin
permissions-policy: accelerometer=(self), autoplay=(self "https://www.youtube.com"), camera=(self), encrypted-media=(self "https://www.youtube.com"), fullscreen=(self "https://www.youtube.com"), geolocation=(self "https://*.hubspot.com" "https://*.hubspot.net"), gyroscope=(self), magnetometer=(), microphone=(self), payment=(), usb=()
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
content-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.hs-analytics.net *.hs-banner.com *.hs-scripts.com *.hsadspixel.net *.hscollectedforms.net *.hsforms.com *.hsforms.net *.hsleadflows.net *.hubspot.com *.hubspot.net *.hubspotfeedback.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.usemessages.com *.hotjar.com https://js.hubspot.com *.hs-sites.com https://*.clearbit.com https://*.clearbitjs.com https://*.clearbitscripts.com https://*.g.doubleclick.net https://app.revenuehero.io https://community.traefik.io https://feedback-eu1.hubapi.com https://feedback.hubapi.com https://js-eu1.hscta.net https://js.hscta.net https://px.ads.linkedin.com https://r2.leadsy.ai https://s3-us-west-2.amazonaws.com https://9xgnrndqve.execute-api.us-west-2.amazonaws.com https://snap.licdn.com https://static.ads-twitter.com https://static.hsappstatic.net https://traefik.github.io https://traefik