Skip to content
https://greenhouse.io

Infrastructure

· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.
SCORE
91
GRADE
A
FIX
1
REVIEW
2
PASS
6
INFO
0
Probed from Madrid, Spain
301 Moved Permanently
Checks
9
6 PASS 2 REVIEW 1 FIX
D
CDN & Delivery
Action
No CDN detected
FIX
No CDN detected
Warning::
No CDN detected
A CDN can significantly improve load times for users around the world by caching content at edge nodes closer to them.
No CDN detected

Consider using a CDN to improve global delivery speed and reduce origin load.

C
IPv6 Readiness
Action
No IPv6 support
REVIEW
No IPv6 support
Info::
No IPv6 (AAAA) records found
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
No IPv6 Support
About 40% of internet users have IPv6. Consider adding AAAA records.

IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.

Why this matters

No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.

Source: Google IPv6 stats

B
TLS Certificate Expiry & Recommendations
83 days until leaf cert expires — 3 issues to address
REVIEW

Certificate validity

83
days left
0d 30d 60d 90d+

Recommended actions

  • Add the preload directive and submit to hstspreload.org once max-age + includeSubDomains are in place
  • Enable DNSSEC on your domain for DNS spoofing protection
  • Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
A+
DNS Records
3 A records, 136 ms lookup
PASS
3 A records, 136 ms lookup
Info::
Resolves to 3 IPv4 address(es)
Got: 54.185.9.199, 52.36.14.47, 44.240.221.79
Info::
No IPv6 (AAAA) records
Info::
4 nameserver(s) configured
Got: ns-979.awsdns-58.net, ns-1030.awsdns-00.org, ns-491.awsdns-61.com, ns-1915.awsdns-47.co.uk
Info::
5 mail exchanger(s) configured
Info::
CAA records not checked
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Info::
SPF record present in TXT
Info::
DNS resolution time: 136 ms
Got: 136 ms
A54.185.9.199, 52.36.14.47, 44.240.221.79
AAAA—
CNAME—
NSns-979.awsdns-58.net, ns-1030.awsdns-00.org, ns-491.awsdns-61.com, ns-1915.awsdns-47.co.uk
MX
1 aspmx.l.google.com
2 alt1.aspmx.l.google.com
2 alt2.aspmx.l.google.com
3 aspmx3.googlemail.com
3 aspmx2.googlemail.com
TXT
wiz-domain-verification=83a4a32f4164ac4c3eb7ac3fed7ca0c2fda0687d19a3ea148a08b884...
atlassian-domain-verification=fJzwjhOhtaJlO8Na/8xi50tOsZtruW1U3afsd1zjr80rFFxplh...
projectdiscovery-verification=1dbf4e1098
globalsign-domain-verification=wvdz6fqNpGYoUxoyCbEUOYrkz-Z8Nh2zXAoS8lsLRh
apple-domain-verification=Rr67q0RP7VJWY0pL
google-site-verification=3_8pGw2wANcRJwCH24jySFpeP1Df592fUnoHR8rK09k
_cbc-idp-site-verification-05d126=59623ea8af44d2c370f49f5de5667df63bea9860e5dfb1...
smartsheet-site-validation=RzCTnQdutabvaUkXZDI6HVUPAiL74JHl
mongodb-site-verification=Gb5MedTIp7JjMCFf5qki3lUC2vOc8dSk
mgverify=0d1a09f823790319f8adde74f1c3aabe91adf87ee26baec23e8fbda05f7d8f4d
MS=ms37084847
SPF v=spf1 include:_spf.google.com include:_spf.salesforce.com include:mail.zendesk....
h1-domain-verification=qxpWWgQGk1B53G4vYbjsagtjKcACsM2dkaYUWCJSkMncMKLZ
cursor-domain-verification-em4b70=pfPTaAl1lIF60yUIapNffrNd9
jamf-site-verification=Sy3ix-3tb-BAnjulkJzxXQ
stripe-verification=4e2f499093a454fe1ab345b7ead291cd7ba05f17d5149311241b1a83b4ab...
_globalsign-domain-verification=eRi2ZQZJ99fAou8jrSC06eUJpasrvj8YgWl21vaW5G
drift-domain-verification=027cb49f22e0bb9b7fce089f313985f2767caabb1f1b71257f5f17...
google-site-verification=8y3RKXHUVVOBgNo3yEryaCmWWFhla1q7Q1ZaHrBolQ0
google-site-verification=jeyl73ukbyvP5WevD_ncu4fy2cV1GTinuwKsjfiZFys
miro-verification=3456efedc68a02a3e196a1dac50625d53b1f69b0
google-site-verification=MqRovwUSTsJoyHxvUTjoTWZuY-bjS-rHie7E8HgmRVI
anthropic-domain-verification-f15dzg=j2vlBNb8QLNNq0LujkpAxf4VF
MS=EEE0E29D9AFF3ACF9908AE2F4E1C43B83C5DBE56
atlassian-sending-domain-verification=513b60eb-23fb-47f4-8d35-b598c89c8f30
openai-domain-verification=dv-sBupOmIJMX8zKaeGsYKVorVN
Dynatrace-site-verification=300bd6ce-e949-47d6-b9eb-7a5aea80e986__416ua32pihp9t1...
status-page-domain-verification=cwwbpn2xf628
zoom-domain-verification = 1148e20b-5c01-4381-a838-e4f22b649898
pendo-domain-verification=666801f8-f01a-47b9-a229-20df883a6c92
_globalsign-domain-verification=OYfE_CcZQWFlEEOrR5yVCfCtmiQrm0bBdyUAJyg3qE
google-site-verification=ypYoZk9xX4NQDRa-GOx76sD-CVAaUATgM0C0kW3AXZk
google-site-verification=Atdo46qsz4MUvzx3fvcmknGXL233Cm96YUy00oNg8Q4
google-site-verification=ownv2CVjMjjagWBnR__vUOx3VRfOA1pbQdX-Njj0ynA
adobe-idp-site-verification=e73b237c66673449b40c4ce8b58963af9d98a81c1a09c50d4967...
twilio-domain-verification=e11c320e191a0419ccc92f88eb8cc9e7
CAALookup not available with standard resolver
Resolved in 136 ms

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

Why this matters

Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.

A
Redirect Chain
1 redirect(s), 633 ms total
PASS
1 redirect(s), 633 ms total
Info::
Single redirect
Got: https://greenhouse.io → https://www.greenhouse.com/ (301)
Info::
WWW normalization redirect
Info::
Redirect overhead: 633 ms total
Got: 633 ms
Info::
Cross-domain redirect detected

https://greenhouse.io

534 ms · HTTP/1.1

301

https://www.greenhouse.com/

99 ms · HTTP/1.1 FINAL

#URLStatusTimeProtocolServer
1https://greenhouse.io301534 msHTTP/1.1
2https://www.greenhouse.com/20099 msHTTP/1.1cloudflare

See the visual redirect chain in the HTTP Probe tab →

A+
Crawlability
robots.txt present, sitemap with 3055 URLs
PASS
robots.txt present, sitemap with 3055 URLs
Info::
robots.txt is present
Got: 83 bytes
Info::
sitemap.xml is present
Info::
sitemap.xml is valid XML
Info::
sitemap.xml contains 3055 entries
Info::
robots.txt references sitemap
robots.txt 200 OK
Size 83 B Sitemaps referenced 1 User-agents * Blocking No — crawling allowed
User-agent: *

Disallow: /*_page=

Sitemap: https://www.greenhouse.com/sitemap.xml
sitemap.xml 200 OK
Type URL Set URLs 3055 entries Valid XML Yes
Sample URLs:
A+
URL Variants
www/non-www, trailing slash, HTTP→HTTPS
PASS
www/non-www, trailing slash, HTTP→HTTPS
Info::
www/non-www redirect configured correctly (preferred: non-www)
Info::
HTTP correctly 301-redirects to HTTPS

www / non-www

301https://www.greenhouse.io/
200https://greenhouse.io/

Preferred variant: non-www

HTTP → HTTPS

301http://greenhouse.io/ → https://www.greenhouse.com/

Consistent

A+
Domain Intelligence
greenhouse.io — via Gandi SAS, 14 years, 2 months old, hosted on AWS
PASS
greenhouse.io — via Gandi SAS, 14 years, 2 months old, hosted on AWS
Info::
Domain registered until May 1, 2027 (1 years remaining)
Info::
Registrar: Gandi SAS
Info::
Registrar lock is enabled
Domain cannot be transferred without explicit unlock from the registrar. This protects against unauthorized transfers.
Info::
Hosting: AWS
Got: AS16509
Domain expiry

322 days

May 1, 2027

SSL certificate

83 days

Issued by Let's Encrypt

Domain age

14 years, 2 months

Registered May 1, 2012

DNSSEC

Status unknown

Protects against DNS spoofing

Hosting

AWS

ASN AS16509

54.185.9.199

Registrar

Gandi SAS

Locked 4 NS records
Expiry timeline
Today
+1 year
Domain expiry SSL expiry Danger zone (≤30 days)
Registrar Gandi SAS
Created May 1, 2012 (14 years, 2 months ago)
Expires May 1, 2027 (1 years)
Last Updated April 5, 2026
Name Servers ns-491.awsdns-61.com, ns-1030.awsdns-00.org, ns-1915.awsdns-47.co.uk, ns-979.awsdns-58.net
Registrant Greenhouse Software
Hosting
IP Address 54.185.9.199
ASN AS16509 (AMAZON-02 - Amazon.com, Inc., US)
Provider AWS
Data source: whois (1.1s)

Domain cannot be transferred without explicit unlock from the registrar. This protects against unauthorized transfers.

Why this matters

Registrar lock (clientTransferProhibited et al.) prevents unauthorized domain transfers — strongest defense against domain hijacking.

Source: ICANN / domain-security best practice

A
HTTP Probe Timing
Total 574 ms — DNS, TCP, TLS, TTFB, content transfer breakdown
PASS
DNS Lookup DNS Lookup — time to resolve the domain name to an IP address.
46 ms
TCP Connect TCP Connect — time to establish a TCP connection to the server.
173 ms
TLS Handshake TLS Handshake — time to complete the HTTPS encryption handshake.
179 ms
Time to First Byte Time to First Byte — how long the server takes to respond with the first byte of data.
575 ms
Total Time Total request time from DNS lookup through full response.
575 ms

Connection waterfall

DNS Lookup 46 ms TCP Connect 173 ms TLS Handshake 179 ms Server Processing 177 ms Content Transfer 0 ms
All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.

Send Feedback