withorb.com

HTML metadata

Title: The revenue design company | Orb
Description: Design, execute, and operate revenue with usage-based billing. Orb helps modern software companies adapt pricing as products, usage, and costs evolve.
Language: en
Canonical: https://www.withorb.com

Open Graph

url: https://www.withorb.com
title: The revenue design company | Orb
locale: en_US
site name: Orb
description: Design, execute, and operate revenue with usage-based billing. Orb helps modern software companies adapt pricing as products, usage, and costs evolve.

Technology

CDN: Vercel
CMS: Next.js

Analytics

Google Tag Manager

Third-party hosts loaded (3)

www.googletagmanager.com×2
px.ads.linkedin.com×1
www.facebook.com×1

Social

Registration

Registrar

Squarespace Domains II LLC

Created

2019-10-12

Expires

2026-10-12 145 days left

Updated

2025-09-27

Name servers

carl.ns.cloudflare.com
kiki.ns.cloudflare.com

DNS records live

NS

carl.ns.cloudflare.com
kiki.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 7 TXT records

anthropic-domain-verification-c3wjqh=fh1dQbIi6AIuleVmn2409D7ji
apple-domain-verification=zB20uerRTUQVwE4y
google-site-verification=OdhUljfyk5OBKd2pRCH-V5bFEtlDH3MZjOJoNKarclc
google-site-verification=chhgjVw3YYo2ZEHYSYtj70WsZbduN6YVGbA2pZ3kM8I
pardot1095882=0b1804f17ca1e5e2a060089595dbe3cd80358ccef9318c0881f7a9c3e7804ff8
stytch_verification_dns=safe-apatosaurus-9441
0CFC6DD514

Email authentication strong

SPF

v=spf1 include:_spf.google.com include:21703233.spf03.hubspotemail.net ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:postmaster@withorb.com; sp=quarantine

policy: quarantine · sp=quarantine

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/AforywaOnKYfQu7u3IjrKWfBnmcI11v3Pc3051GoE78zUrtdo24jrpvwb/Duj6nP4QtCndAlYELN…

selectors probed

Certificate (current)

R12

from 2026-05-07 to 2026-08-05

Expires in 77 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.withorb.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'nonce-5q1xQVGZp3/oV/hUF9A16A==' 'self' 'strict-dynamic' https://vercel.live https://rstr.in https://cdn.raster.app https://*.sanity.io https://core.sanity-cdn.com https://cdn.jsdelivr.net https://jobs.ashbyhq.com https://*.outgrow.us https://*.outgrow.co https://dyv6f9ner1ir9.cloudfront.net https://*.chilipiper.com https://www.youtube.com https://s.ytimg.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.google.com https://*.gstatic.com https://js.hs-banner.com https://js.hs-analytics.net https://js.hsforms.net https://js.hs-scripts.com https://js.hscollectedforms.net https://*.hubspot.com https://*.hsforms.com https://connect.facebook.net https://static.ads-twitter.com https://snap.licdn.com https://darkvisitors.com https://*.claydar.com https://*.contentsquare.net https://*.heapanalytics.com https://cdn.heapanalytics.com https://cdn.dreamdata.cloud https:/
strict-transport-security: max-age=31536000; includeSubDomains; preload