vyos.io

HTML metadata

Title: VyOS Networks - Home of enterprise-grade open source Network OS
Description: Enterprise-grade open source networking for bare metal, cloud, and edge. High-performance routing, firewall and VPN in one platform. Unlimited software deployments, flexible support tiers.
Language: en
Canonical: https://vyos.io

Open Graph

url: https://vyos.io
title: VyOS Networks - Home of enterprise-grade open source Network OS
locale: en_US
site name: VyOS
description: Enterprise-grade open source networking for bare metal, cloud, and edge. High-performance routing, firewall and VPN in one platform. Unlimited software deployments, flexible support tiers.

Technology

CDN: Cloudflare
CMS: Next.js

Cookie consent

Cookiebot

Third-party hosts loaded (2)

www.datocms-assets.com×2
consent.cookiebot.com×1

Social

DNS records live

NS

igor.ns.cloudflare.com
sofia.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 26 TXT records

slack-domain-verification=PaAC6hUksDoOrEcAggm3U34NN5tI0TB3CkH1t8c1
MS=ms38968780
apple-domain-verification=R2CmG5X79sTJowz9
stripe-verification=7FA53EB70959ACA6518697CAB79333A94E42F723691C8269FFD450CB85DE77CE
stripe-verification=81e041f78125081534d1647db2022105cb4e6fc3111d37f22eeafb866c17fc18
twilio-domain-verification=26948372f6101968d50fbd5a6c1afd92
linkedin-site-verification=5ea384d4-1a19-4bb9-90c5-9c69a72b0fe9
google-site-verification=oLRxerJ1Ex-o81Vq3u1J7DInD-V8JnIZCAg4TZRpLAw
stripe-verification=6481948301dc7b2b002753d0946804659e2b26c032bf56de7dfe2713fcb534fb
cloudflare_dashboard_sso=229cfef91c4a39cbaf62917dbb19a7ea
google-site-verification=j3x6nAl8cCfBCaGAbESDdSqcJK2xGI0d722XCNqU4AE
zapier-domain-verification-challenge=e1ec4d56-f927-47e4-ad71-836cae8ff931
anthropic-domain-verification-t97a72=gOuNdFVxudboKiHU8pTl4rh8h
atlassian-domain-verification=DmxH1IDdRVqKKvk54Zfx2jSifbUH6cJhMr5Ok3bXGKphbbevk1TldYDb4bOw0Tui
stripe-verification=50d956152900c2ec64188a36699e5acd3bb758a73fa1276e06c25a5e64dd34e8
google-site-verification=VTBUM-jSPDAYEqhHp3FK-knwlrxHd8tHDawS6zp__w0
atlassian-domain-verification=JJMSxn5tW6oGejofwSVWVB4V9qqDJRE8oihy9vUl5JYpxX/Vn9Q9uvJN9ZQ0Klg4
atlassian-sending-domain-verification=4e4aec87-f865-4b91-8397-987378ffd6bd
google-site-verification=cfZ92S0RftAdgAd0HjQBDfz-TmmspqUlguu3OTivhiE
openai-domain-verification=dv-FImfggh2B3A7N5sw1sfnyKUO
globalsign-domain-verification=lAmOSHnmgl1P_-IZZ6q4kwLlFxGZFfcGwCvlJO4Ab7
stripe-verification=9818f2dc62ee01ad9db5ffed13d8a260f8badba59431d20ff9a42563c77dd16f
facebook-domain-verification=exr2v3zvv601vquvoft5ozbmju1rfx
stripe-verification=2ed4dd5e42e769a419eb7c87bca7efe26b20b9e477dac101f62d2f24e01491c4
amazon-business-verification=abb45ea7cab1688f1144ae746bd0d13ab4cd00fe47414203b2219bf412a3be9d
google-site-verification=jbbbFUqpOFUhbSVbycppe8UQwrc6_o1d4oqk1JbAHJM

Email authentication strong

SPF

v=spf1 include:_spf.google.com include:4129050.spf04.hubspotemail.net include:spf.mtasv.net include:amazonses.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; pct=100; rua=mailto:f920912954904e55ba98c3372ca6c1a0@dmarc-reports.cloudflare.net,mailto:a.rcqpftrh@sdmarc.net; ruf=mailto:f.rcqpftrh@sdmarc.net; fo=1

policy: reject (enforced)

DKIM

Show 4 DKIM selectors

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+gk7pE3KcvOFwMgDpwOnTXJTwT9S4Cv+j3scle/+RwJAiHKVXueYC/0qmgtWdNcDtziJW9SkanR2n…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nhy+QNv1KEbuyoSk5hA7eDvnQGGJepjL4/ZZ06pfyhUNALK2JaBl/NlPo13U9dZPJtfVc+AU1Zg9pC2++…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCj2M0V5NJN/XwZagEsvlkXb+SNZSN17l1YMvcLCdt8/WGanHryZZFpbWghQMpwPAyHPi+UynL2dsgOgBaRwPTaEj…
smtpapi: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76…

selectors probed

Certificate (current)

WE1

from 2026-04-01 to 2026-07-01

Expires in 42 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://vyos.io/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), autoplay=(), camera=(), display-capture=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), xr-spatial-tracking=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://consent.cookiebot.com https://consentcdn.cookiebot.com https://metrics.vyos.io https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://snap.licdn.com https://www.redditstatic.com https://www.clarity.ms https://scripts.clarity.ms https://static.hotjar.com https://script.hotjar.com https://tracking.g2crowd.com https://js.hs-scripts.com https://js.hs-banner.com https://js.hs-analytics.net https://js.hscollectedforms.net https://js.hsadspixel.net https://js.hubspot.com https://static.hsappstatic.net https://vercel.live; style-src 'self' 'unsafe-inline' https://consentcdn.cookiebot.com; img-src 'self' data: blob: https://www.datocms-assets.com https://metrics.vyos.io https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://
strict-transport-security: max-age=31536000