xwiki.com

HTML metadata

Title

Your knowledge organized - XWiki

Description

Home of the XWiki and CryptPad Open Source projects. Looking to organize your information better? XWiki SAS's team of professionals is the best solution for you and your team. Ready-to-use or Customized. On-Premise or hosted in Cloud.

Language

en

Canonical

/en/Main/

Feeds

Wiki Feed RSS RSS
Blog RSS Feed RSS

Open Graph

title: XWiki SAS - Organize your information
description: Looking to organize your information better? XWiki's team of professionals is the best solution for you and your team. Ready-to-use or Customized. On-Premise or hosted in Cloud.

Technology

Server: Jetty(12.0.20)

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×3

Social

Registration

Registrar

OVH sas

Created

2003-12-02

Expires

2026-12-02 195 days left

Updated

2025-12-03

Name servers

ns1.xwiki.com
ns2.xwiki.com

DNS records live

NS

ns1.xwiki.com
ns2.xwiki.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

Verified for

Google
Yandex

Email authentication strong

SPF

v=spf1 a:relay1.xwiki.com a:relay2.xwiki.com a:relay3.xwiki.com a:mail.wikiterritorial.xwikisas.com include:_spf.google.com include:spf.mailjet.com include:spf.postal.xwikisas.com -all

strict (-all)

DMARC

v=DMARC1;p=quarantine;sp=quarantine;adkim=r;aspf=r

policy: quarantine · sp=quarantine

DKIM

google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCbvsjeQy7RN8ZD/mUoaE3chkinEh4NYqU7sSAassUzV8ecsn4oCjfEdasScF8gsGecuqqzlAaBYuAdrz4lzF…
mail: v=DKIM1; h=sha256; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLPXd8GzNXgAQ5c1NQS/A+UqL+RIdc1h6vWgUQdStHK+t5IQuBaYHo4GBP0Eknf6YaEC…

selectors probed

Certificate (current)

E8

from 2026-05-08 to 2026-08-06

Expires in 78 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://xwiki.com/en/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: connect-src 'self' xwiki.com *.xwiki.com *.google.com *.google.com.br *.gstatic.com *.googleapis.com *.googletagmanager.com *.google-analytics.com *.doubleclick.net *.zendesk.com *.zdassets.com *.zopim.com *.youtube.com *.vimeocdn.com *.twitter.com *.cloudflare.com https://unpkg.com *.openstreetmap.org wss:; script-src 'self' xwiki.com *.xwiki.com *.google.com *.google.com.br *.gstatic.com *.googleapis.com *.googletagmanager.com *.google-analytics.com *.doubleclick.net *.zendesk.com *.zdassets.com *.zopim.com *.youtube.com *.vimeocdn.com *.twitter.com *.cloudflare.com https://unpkg.com *.openstreetmap.org 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' xwiki.com *.xwiki.com *.google.com *.google.com.br *.gstatic.com *.googleapis.com *.googletagmanager.com *.google-analytics.com *.doubleclick.net *.zendesk.com *.zdassets.com *.zopim.com *.youtube.com *.vimeocdn.com *.twitter.com *.cloudflare.com https://unpkg.com *.openstreetmap.org 'unsafe-inline'; img-src 'self' xwiki.com *.xwik
strict-transport-security: max-age=63072000; includeSubDomains;