workprocedures.com

HTML metadata

Title

Work Procedures Software | AI SOP Generator | WorkProcedures

Description

Create work procedures and standard operating procedures in minutes with AI. Generate professional SOPs from 10,000+ templates across 35 industries. Start free.

Language

en

Canonical

https://www.workprocedures.com

Translations

en-us

Open Graph

url: https://www.workprocedures.com
title: Standard Operating Procedures Software | WorkProcedures
site name: WorkProcedures
description: Generate professional standard operating procedures in minutes. AI-powered SOP creation built on 10,000+ industry procedures.

Technology

CDN: Vercel
CMS: Next.js

Fonts

Google Fonts

Social widgets

YouTube Embed

Third-party hosts loaded (6)

www.youtube-nocookie.com×4
play.google.com×3
fonts.googleapis.com×1
fonts.gstatic.com×1
o0.ingest.sentry.io×1
va.vercel-scripts.com×1

Social

Contact

Email

hello@workprocedures.com

Registration

Registrar

GoDaddy.com, LLC

Created

2022-11-22

Expires

2027-11-22 551 days left

Updated

2026-02-04

Name servers

ns77.domaincontrol.com
ns78.domaincontrol.com

DNS records live

NS

ns77.domaincontrol.com
ns78.domaincontrol.com

MX

0 mx1-usg2.ppe-hosted.com
0 mx2-usg2.ppe-hosted.com
0 mx3-usg2.ppe-hosted.com

TXT

NETORG20315670.onmicrosoft.com
google-site-verification=UQ5QtHGV-VHFkCYAqrGI-6w43yEUt_3gF_K-jKrV1qk

Email authentication strong

SPF: v=spf1 include:_spf-usg2.ppe-hosted.com include:secureserver.net ~all
softfail (~all)
DMARC: v=DMARC1; p=quarantine; adkim=r; aspf=r; rua=mailto:dmarc_rua@onsecureserver.net;
policy: quarantine
DKIM: no key found at common selectors

Certificate (current)

R13

from 2026-04-08 to 2026-07-07

Expires in 49 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.workprocedures.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: camera=(), microphone=(), geolocation=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.stripe.com https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://t.contentsquare.net https://*.contentsquare.net https://*.contentsquare.com; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https: https://www.googletagmanager.com https://googleads.g.doubleclick.net https://*.contentsquare.net https://*.contentsquare.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://api.stripe.com https://vitals.vercel-insights.com https://*.vercel-analytics.com https://www.google.com https://www.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://*.contentsquare.net https://*.contentsquare.com; media-src 'self' https://res.cloudinary.com https://streamable.com https://*.streamable.com; frame-src 'sel
strict-transport-security: max-age=63072000; includeSubDomains; preload