indexo.dev

worklio.com

.com crawl

First seen 2026-05-16 · Last seen 2026-05-20 · ok HTTP/1.1 200 2286 ms crawled 2026-05-20

US · 104.43.221.31 · AS8075 Microsoft Corporation

Reputation 89/100 weak security headers dmarc monitor-only

sector b2b services type app saas

HTML metadata

Title
Worklio | Embedded Payroll API & White-Label HR Platform for PEOs & Marketplaces
Description
Embed white-label payroll, HR, and benefits into your platform with REST APIs, multi-tenant architecture, and enterprise tax compliance. Built for PEOs, ASOs, and SaaS companies.
Language
en

Open Graph

title
Worklio | Embedded Payroll API & White-Label HR Platform for PEOs & Marketplaces
site name
Worklio
description
Embed white-label payroll, HR, and benefits into your platform with REST APIs, multi-tenant architecture, and enterprise tax compliance. Built for PEOs, ASOs, and SaaS companies.

Technology

CMS
Next.js
Analytics
  • Google Tag Manager

Third-party hosts loaded (1)

  • www.googletagmanager.com×1

Social

Registration

Registrar
GoDaddy.com, LLC
Created
2015-03-10
Expires
2027-03-10 293 days left
Updated
2025-03-11
Name servers
  • ns27.domaincontrol.com
  • ns28.domaincontrol.com

DNS records live

NS
  • ns27.domaincontrol.com
  • ns28.domaincontrol.com
MX
  • 0 worklio-com.mail.protection.outlook.com
TXT
  • czjb4hbs4sl32ddsxcnl6ftxcq0kvbpn
  • linkedin-site-verification=6ec23570-fbe3-44c3-b6a6-844c19ad75b0
Verified for
  • Brevo
  • Google

Email authentication partial

SPF
v=spf1 ip4:159.183.150.86/32 ip4:168.245.32.5/32 ip4:64.135.83.0/24 ip4:64.135.82.0/24 ip4:64.135.77.0/24 ip4:212.4.136.0/26 include:spf.protection.outlook.com include:sendgrid.net include:worklio.com -all
strict (-all)
DMARC
v=DMARC1; p=none; rua=mailto:dmarc@worklio.com; ruf=mailto:dmarc@worklio.com; fo=1; adkim=r; aspf=r;
policy: none (monitoring only)
DKIM
Show 5 DKIM selectors
  • k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
  • k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
  • mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…
  • s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwhlaGoIva2fdvQNm8WptrfNb7dhKwRmuEZ3HJiPxcst790lY3H+nm4ryLqCSmPqzO6UrDAU5wlId+eTb5…
  • s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDBoj1cD2pZmVSxXGZ10Uz4JHR2WvCSiGjTE4f79rM+iDi2HEdf8D7qqDMufIesZnzNzU8IioQXLVyL4bI69/3BKo…
selectors probed

Certificate (current)

GeoTrust TLS RSA CA G1
from 2026-04-20 to 2026-10-21
Expires in 153 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://worklio.com/

findings
  • missing HSTS
  • missing Content Security Policy
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy

Links to (4)

Linked from (1)