unlayer.com

HTML metadata

Title: Best Embeddable Email, Page & Document Builder | Unlayer
Description: Unlayer is the best embeddable, white-label email, page & document builder for SaaS. Integrate via API to give users powerful, no-code design tools.
Language: en
Canonical: https://unlayer.com

Open Graph

title: Best Embeddable Email, Page & Document Builder | Unlayer
description: Unlayer is the best embeddable, white-label email, page & document builder for SaaS. Integrate via API to give users powerful, no-code design tools.

Technology

CDN: Vercel
CMS: Next.js

Analytics

Google Tag Manager

Third-party hosts loaded (2)

images.ctfassets.net×12
www.googletagmanager.com×1

Social

Registration

Registrar

NameCheap, Inc.

Created

2017-10-10

Expires

2029-10-10 1240 days left

Updated

2020-07-11

Name servers

elinore.ns.cloudflare.com
simon.ns.cloudflare.com

DNS records live

NS

elinore.ns.cloudflare.com
simon.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 aspmx2.googlemail.com
10 aspmx3.googlemail.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 7 TXT records

facebook-domain-verification=4kdrztd8t518eqpp38rciv8ry1ue86
google-site-verification=2ZxK8tyyv9f5S4lKGO0zYtVt345T8UZDEfKv0_qFtZI
google-site-verification=AjvZBC-5SxyBIvYPyqeOBZzb7ZrRq5SEojmHAmlWbOo
google-site-verification=DXA_iN-tnp-2KSg1YSZ_B0kg8v46k2sr5kYtF-5h9Ls
mandrill_verify.zcVIiaATxAFILGuHNOJM8Q
MS=ms79311571
apple-domain-verification=HwzLQOYTRlE6LHfW

Email authentication strong

SPF

v=spf1 include:_spf.google.com include:21061360.spf08.hubspotemail.net -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; fo=1; rua=mailto:dmarc@getbeamer.com; ruf=mailto:dmarc-dmarc@getbeamer.com;

policy: quarantine

DKIM

s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLWm+qXx31lyMaKdoN9JJwYNbOd7e/jDgCIHSx2yz8mCPVib7ldk9NQo3Bzlr9s9wmFW9SSBZk9EQoRMvr…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC+x/E1/n1VW41IOKERJHZbT7CxkqjAwDw9SIl4uDCGg9OyeEJ0ckeW/FuYz6OFEaC4SLKeMRwLEOsGKVQSKdWrHK…

selectors probed

Certificate (current)

R12

from 2026-03-20 to 2026-06-18

Expires in 30 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://unlayer.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
permissions-policy: camera=(), microphone=(), geolocation=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' https:; connect-src 'self' https: wss:; worker-src 'self' blob:; frame-src 'self' https://www.youtube.com https://player.vimeo.com https://www.googletagmanager.com https://forms.hubspot.com https://js.hsforms.net https://www.facebook.com https://changelog.unlayer.com https://google.com https://www.google.com https://calendar.google.com https://www.gstatic.com https://api.unlayer.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https://forms.hubspot.com https://www.facebook.com
strict-transport-security: max-age=63072000