indexo.dev

xonasystems.com

.com crawl

First seen 2026-04-21 · Last seen 2026-05-15 · ok HTTP/1.1 200 770 ms crawled 2026-05-15

US · 199.60.103.7 · AS209242 Cloudflare London, LLC

Reputation 100/100

Classifying

HTML metadata

Title
Secure Remote Access for OT and ICS Zero Trust Platform | Xona
Description
Xona provides secure remote access for OT and ICS through a browser-based Zero Trust platform. Improve security, streamline compliance, and replace VPNs with identity-based access.
Language
en
Generator
HubSpot
Canonical
https://www.xonasystems.com

Open Graph

url
https://www.xonasystems.com
title
Secure Remote Access for OT and ICS Zero Trust Platform | Xona
description
Xona provides secure remote access for OT and ICS through a browser-based Zero Trust platform. Improve security, streamline compliance, and replace VPNs with identity-based access.

Technology

CDN
Cloudflare
CMS
Joomla
Analytics
  • Google Tag Manager

Third-party hosts loaded (3)

  • cdnjs.cloudflare.com×2
  • cdn.bizible.com×1
  • www.googletagmanager.com×1

Social

Registration

Registrar
Tucows Domains Inc.
Created
2016-02-24
Expires
2027-02-24 280 days left
Updated
2026-05-11
Name servers
  • karsyn.ns.cloudflare.com
  • reese.ns.cloudflare.com

DNS records live

NS
  • karsyn.ns.cloudflare.com
  • reese.ns.cloudflare.com
MX
  • 0 xonasystems-com.mail.protection.outlook.com
TXT
Show 6 TXT records
  • cloudflare_dashboard_sso=96dae903f30819b417d62752fbb8fab7
  • linkedin-site-verification=d0a0492d-a0c5-40d0-94c8-3bb0f1b6e317
  • logmein-verification-code=89640eed-fa14-4620-ba7c-2fceca1bde3c
  • my66bwkz4knfx6ghfmrycx6b2knlzmm0
  • opine-verification=d1961801-3db2-4cfb-b6fb-0a4f8618a99a
  • Q1NK195QDJKVJWRVXNTQQ6MOC2JZUR1T8ITM74IA
Verified for
  • 1Password
  • Adobe
  • Anthropic
  • Atlassian
  • GlobalSign
  • Microsoft 365
  • OpenAI

Email authentication strong

SPF
v=spf1 include:spf.protection.outlook.com include:5541006.spf05.hubspotemail.net -all
strict (-all)
DMARC
v=DMARC1; p=reject; rua=mailto:dmarcreports@xonasystems.com; pct=100; sp=none
policy: reject (enforced) · sp=none
DKIM
  • default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4Es8LuG/wLBQinl148NSvBey2igp2RObPsjr8B0usZo7kEvcvns9f1He8az2HI8N9GwtXqWERyv+X…
  • selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4QSnk3nrVTYJSOlSTmjMoJ33Zvka6bdc0KhGoQcryLLeAIKI/OU4DdHBE6Ga0btSBlPY5t0Fv0Ip/…
  • selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mdlnjM0TdE34Frg+UXMLxHqVJkqiYxp1p1QFAK6KRqWTPhvjVZ/5u1Ox1wjpakVUFZxHTt8vuLSDr…
selectors probed

Certificate (current)

E7
from 2026-04-18 to 2026-07-17
Expires in 58 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.xonasystems.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP uses wildcard sources
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
permissions-policy
geolocation=(), midi=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), fullscreen=(self), payment=()
x-content-type-options
nosniff
content-security-policy
script-src 'self' 'strict-dynamic' www.xonasystems.com *.hsadspixel.net *.hs-analytics.net js.hscta.net *.hubspot.com static.hsappstatic.net *.usemessages.com *.hs-banner.com *.hubspot.net *.hscollectedforms.net *.hsleadflows.net *.hsforms.net *.hsforms.com *.hs-scripts.com *.hubspotfeedback.com feedback.hubapi.com 'nonce-hGSyfymWiLPodF9yIwK+IQ=='; connect-src 'self' *.hubapi.com js.hscta.net *.hubspot.com *.hs-banner.com *.hubspotusercontent-na1.net *.hscollectedforms.net *.hsforms.com *.hsforms.net static.hsappstatic.net app.lemlist.com ws.zoominfo.com cdn.cookielaw.org *.google-analytics.com *.googletagmanager.com px.ads.linkedin.com analytics.google.com *.doubleclick.com *.doubleclick.net scout.salesloft.com; img-src 'self' js.hscta.net no-cache.hubspot.com *.hubspot.com *.hubspotusercontent-na1.net *.hubspot.net cdn2.hubspot.net *.hsforms.net *.hsforms.com static.hsappstatic.net cdn.bizible.com *.ads.linkedin.com *.google.com.pe *.google-analytics.com *.googletagmanager.com; frame
strict-transport-security
max-age=31536000

Links to (2)

Linked from (2)