Arbol · Domain Security

Arbol Domain Security

Domain security

Domain security posture for Arbol, probed live across 4 host(s) and 2 registrable domain(s). 4 host(s) serve HTTPS (up to TLSv1.3); 3 advertise HSTS. Email/DNS controls: DNSSEC present, SPF present, DMARC present (p=reject).

CompanyInsuranceParametric InsuranceClimate RiskWeatherReinsuranceClimate DataAgricultureEnergyRisk Management

Transport & Host Security

www.arbol.io
HTTPS: yes · TLS: TLSv1.3 · HSTS: yes · cert expires: Oct 1 11:52:44 2026 GMT
insurance.arbol.io
HTTPS: yes · TLS: TLSv1.3 · HSTS: yes · cert expires: Sep 12 13:20:03 2026 GMT
insurance.arbol.uk
HTTPS: yes · TLS: TLSv1.3 · HSTS: yes · cert expires: Sep 12 00:44:23 2026 GMT
app.arbol.io
HTTPS: yes · TLS: TLSv1.3 · HSTS: no · cert expires: Dec 30 23:59:59 2026 GMT

Domain (DNS/Email) Security

arbol.io
DNSSEC: yes · SPF: yes · DMARC: yes (p=reject) · CAA: none
arbol.uk
DNSSEC: yes · SPF: no · DMARC: no · CAA: none

Source

Domain Security

arbol-domain-security.yml Raw ↑ 
generated: '2026-08-02'
method: probed
source: live DNS/TLS/HTTP probes of apis.yml + OpenAPI hosts
hosts:
- host: www.arbol.io
  https: true
  tls_version: TLSv1.3
  cert_expires: Oct  1 11:52:44 2026 GMT
  hsts: true
  hsts_max_age: 31536000
- host: insurance.arbol.io
  https: true
  tls_version: TLSv1.3
  cert_expires: Sep 12 13:20:03 2026 GMT
  hsts: true
  hsts_max_age: 31536000
- host: insurance.arbol.uk
  https: true
  tls_version: TLSv1.3
  cert_expires: Sep 12 00:44:23 2026 GMT
  hsts: true
  hsts_max_age: 31536000
- host: app.arbol.io
  https: true
  tls_version: TLSv1.3
  cert_expires: Dec 30 23:59:59 2026 GMT
  hsts: false
domains:
- domain: arbol.io
  dnssec: true
  caa: []
  spf: true
  dmarc: true
  dmarc_policy: reject
- domain: arbol.uk
  dnssec: true
  caa: []
  spf: false
  dmarc: false
x-note: >-
  www.arbol.io was probed by 0-working/probe-domain-security.py from apis.yml
  hosts; insurance.arbol.io, insurance.arbol.uk and app.arbol.io were probed
  manually on the same date because Arbol has no apis[] entries for the script
  to walk. app.arbol.io — the authenticated broker/agent platform — is the one
  host with no HSTS header. arbol.uk publishes no SPF or DMARC record.

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools

Call it yourself

curl for this page
This security artifact 
curl "https://apis.io/api/v1/security/arbol-domain-security"
All security posture 
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.