Skip to content
Gridlode
Rank #703Updated November 10, 2026

owasp.org

OWASP Foundation - The Open Source Foundation for Application Security

owasp.org is registered with GoDaddy.com, LLC since September 21, 2001 (25.1 years). The registration expires on September 21, 2031. The site runs on Next.js, React, Vercel and 3 other technologies. Its email security grade is C. Its SSL certificate is issued by Let's Encrypt and is valid for 29 more days.

Domain age
25.1 yrs
Technologies
6
Email security
C
SSL days left
29

Registration

RegistrarGoDaddy.com, LLC
IANA ID146
RegisteredSeptember 21, 2001
ExpiresSeptember 21, 2031
UpdatedAugust 12, 2026
Statusclient delete prohibited, client renew prohibited, client transfer prohibited, client update prohibited
Name serversfay.ns.cloudflare.com, west.ns.cloudflare.com
DNSSECNot signed

DNS records

TypeValueTTL
A216.150.1.193280
A216.150.16.193280
MXaspmx.l.google.com 1300
MXalt3.aspmx.l.google.com 10300
MXalt4.aspmx.l.google.com 10300
MXalt1.aspmx.l.google.com 5300
MXalt2.aspmx.l.google.com 5300
NSfay.ns.cloudflare.com86400
NSwest.ns.cloudflare.com86400
TXTMS=ms73859685300
TXTRrGYbfHtHhF55ld5k5Rw87iuBu7wAWOX4GR9zffrTh4=300
TXTatlassian-domain-verification=BhaFKFKoRcW20xvi6UJ3U0CKocKOCgLH6LSuiBYPQ5A53cSCUN6gcbzcKSOmlVGs300
TXTgoogle-site-verification=1zT9Of9pBuTj1rgeGCxMbya3iQQMxFE9-DzUBhftUVQ300
TXTgoogle-site-verification=I9qx_X9EKlR_rfceG25-iXHBXJvLrmeNbkEdy182iI300
TXTgoogle-site-verification=_slXlbOCopK1Ss9VQEoxdsNxpScVKvXVB_JtPpyL3eQ300
TXTgoogle-site-verification=hJ9eCIFoexfh1sb-WVBkVB5PEND3JiaojOVyaNpyWK8300
TXTgoogle-site-verification=kmxuuCvLW4gII8YaV-3ilTOLUvjZa3uaipm0tmpVGpU300
TXTgoogle-site-verification=ubHJGF1N2ylOhYxQnIzEIIFaqUodqsIdTLXF-rCX9ps300
TXTv=spf1 include:_spf.google.com include:servers.mcsv.net include:amazonses.com -all300

Technology stack

Hosting
Vercel
JavaScript framework
Next.jsReact
Programming language
Node.js
Security
Content Security PolicyHSTS

SSL certificate

ValidValid
IssuerUS, YR1, Let's Encrypt
ExpiresDecember 9, 2026
Days remaining29
ProtocolTLSv1.3
Namesowasp.org

Email security

CScore 79/100 across SPF, DMARC, DKIM, MTA-STS and BIMI.
  • warnNo MTA-STS: mail sent to you can be downgraded to an unencrypted connection.
  • warnNo TLS-RPT record, so you won't hear about failed encrypted deliveries.
  • warnNo BIMI record (optional: shows your logo next to your emails in supporting inboxes).
  • goodSPF record found.
  • goodSPF ends with -all: servers you have not listed are rejected (hard fail).
  • goodDMARC policy is quarantine: failing mail goes to spam. Move to p=reject for full protection.
  • goodDMARC aggregate reports are sent to mailto:[email protected], mailto:[email protected].
  • goodDKIM keys found (selector: google, k1, k2, s1, s2).
  • good5 MX record(s) found. Mail is handled by Google Workspace.

Homepage metadata

TitleOWASP Foundation - The Open Source Foundation for Application Security
DescriptionOWASP is the nonprofit behind the Top 10, ASVS, ZAP, and hundreds more free application security projects. Explore our tools, standards, local chapters, global events, and news from a community of 250+ chapters worldwide.
Languageen
Canonicalhttps://owasp.org
IndexableYes
Word count778

About owasp.org

Who is the registrar of owasp.org?

owasp.org is registered with GoDaddy.com, LLC (IANA ID 146).

When does owasp.org expire?

The current registration of owasp.org expires on September 21, 2031. It was first registered on September 21, 2001.

What technology does owasp.org use?

We detected 6 technologies on owasp.org, including Vercel, Next.js, React, Node.js, Content Security Policy, HSTS.

Does owasp.org protect its email with SPF and DMARC?

owasp.org scores 79/100 (grade C) for email security. No MTA-STS: mail sent to you can be downgraded to an unencrypted connection. No TLS-RPT record, so you won't hear about failed encrypted deliveries.

What are the name servers of owasp.org?

owasp.org uses fay.ns.cloudflare.com, west.ns.cloudflare.com.