888AI Trusted Reviews · Public OSINT security valuation
odoo.com
Public OSINT valuation for odoo.com: grade B (80/100). Title signal “Open Source ERP and CRM | Odoo”. 3 security headers present, 5 commonly expected headers missing. This is a defensive surface review — not a penetration test.
80
B
Findings
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Content-Security-Policy not observed.
- Set-Cookie includes Secure and HttpOnly flags.
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
- robots.txt is publicly available.
- RDAP domain record available (odoo.com).
- Final HTTP status 200 at https://www.odoo.com/.
Checks
DNS
resolved- A
- 178.33.40.43
- AAAA
- 2001:41d0:249:e200::
- PTR
- www.odoo.com
- error
- —
TLS / certificate
ok- version
- TLSv1.3
- cipher
- TLS_AES_256_GCM_SHA384
- issuer
- Let's Encrypt
- notAfter
- Dec 24 16:39:11 2026 GMT
- SAN sample
- *.odoo.com, odoo.com
- error
- —
HTTP & security headers
3 present- finalUrl
- https://www.odoo.com/
- status
- 200
- server
- nginx
- x-powered-by
- —
- present
- referrer-policy, strict-transport-security, x-content-type-options
- missing
- content-security-policy, x-frame-options, permissions-policy, cross-origin-opener-policy, cross-origin-resource-policy
- cookie Secure
- True
- cookie HttpOnly
- True
Tech fingerprint (public)
passive- title
- Open Source ERP and CRM | Odoo
- generator
- Odoo
- tech
- Google Analytics
- script hosts
- odoocdn.com
- description
- From ERP to CRM, eCommerce and CMS. Download Odoo or use it in the cloud. Grow Your Business.
RDAP / registration
rdap- domain
- odoo.com
- registrar
- OVH sas
- created
- 2001-01-25T11:48:55Z
- expires
- 2034-01-25T11:48:55Z
- nameservers
- ns0.odoo.com, ns1.odoo.com, ns2.odoo.com, ns3.odoo.com
- status
- client delete prohibited, client transfer prohibited
- error
- —
Public well-known
passive- /.well-known/security.txt
- HTTP 200 · found
- /robots.txt
- HTTP 200 · found
- /security.txt
- HTTP 200 · found
Reviews from Trustpilot
Official Trustpilot profile for this domain (public page — we do not scrape Trustpilot).
Open Trustpilot for odoo.comScores/widgets require SECSCAN_TRUSTPILOT_API_KEY on scan.888ai.org · inventKeys=false
888AI Trusted Reviews are brought to You by DOT Synergy llc, the worlds leader in Trusted Reviews.