888AI Trusted Reviews · Public OSINT security valuation
slack.com
Public OSINT valuation for slack.com: grade B (76/100). Title signal “Slack | AI Work Platform & Productivity Tools”. 4 security headers present, 4 commonly expected headers missing. This is a defensive surface review — not a penetration test.
76
B
Findings
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Content-Security-Policy not observed.
- X-Content-Type-Options missing.
- Set-Cookie present but Secure/HttpOnly incomplete on sampled header.
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
- robots.txt is publicly available.
- RDAP domain record available (slack.com).
- Final HTTP status 200 at https://slack.com/.
Checks
DNS
resolved- A
- 52.29.238.212, 3.68.175.98, 3.68.124.168, 3.68.170.153, 3.68.124.95, 18.159.197.225
- AAAA
- —
- PTR
- ec2-52-29-238-212.eu-central-1.compute.amazonaws.com
- error
- —
TLS / certificate
ok- version
- TLSv1.3
- cipher
- TLS_AES_256_GCM_SHA384
- issuer
- Let's Encrypt
- notAfter
- Jan 5 08:37:07 2027 GMT
- SAN sample
- *.slack.com, slack.com
- error
- —
HTTP & security headers
4 present- finalUrl
- https://slack.com/
- status
- 200
- server
- Apache
- x-powered-by
- —
- present
- cross-origin-opener-policy, referrer-policy, strict-transport-security, x-frame-options
- missing
- content-security-policy, x-content-type-options, permissions-policy, cross-origin-resource-policy
- cookie Secure
- True
- cookie HttpOnly
- False
Tech fingerprint (public)
passive- title
- Slack | AI Work Platform & Productivity Tools
- generator
- —
- tech
- Google Analytics
- script hosts
- a.slack-edge.com, cdn.cookielaw.org, d34u8crftukxnk.cloudfront.net
- description
- Boost productivity and save time with Slack — the AI work platform for managing projects, automating workflows, and connecting teams securely. Start working smarter today.
RDAP / registration
rdap- domain
- slack.com
- registrar
- MarkMonitor Inc.
- created
- 1992-10-21T04:00:00Z
- expires
- 2027-10-20T04:00:00Z
- nameservers
- ns-1493.awsdns-58.org, ns-166.awsdns-20.com, ns-1901.awsdns-45.co.uk, ns-606.awsdns-11.net
- status
- client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
- error
- —
Public well-known
passive- /.well-known/security.txt
- HTTP 200 · found
- /robots.txt
- HTTP 200 · found
- /security.txt
- HTTP 200 · found
Reviews from Trustpilot
Official Trustpilot profile for this domain (public page — we do not scrape Trustpilot).
Open Trustpilot for slack.comScores/widgets require SECSCAN_TRUSTPILOT_API_KEY on scan.888ai.org · inventKeys=false
888AI Trusted Reviews are brought to You by DOT Synergy llc, the worlds leader in Trusted Reviews.