Platform.sh · Domain Security

Platform.Sh Domain Security

Domain security

Domain security posture for Platform.sh, probed live across 5 host(s) and 2 registrable domain(s). 5 host(s) serve HTTPS (up to TLSv1.3); 5 advertise HSTS. Email/DNS controls: DNSSEC present, SPF present, DMARC present (p=quarantine).

Platform as a ServiceCloud HostingApplication HostingDeploymentDevOpsContinuous DeploymentContainersManaged ServicesDeveloper ToolsInfrastructureMulticloudWeb Hosting

Transport & Host Security

upsun.com
HTTPS: yes · TLS: TLSv1.3 · HSTS: yes · cert expires: Nov 2 03:17:46 2026 GMT
developer.upsun.com
HTTPS: yes · TLS: TLSv1.3 · HSTS: yes · cert expires: Oct 11 13:16:30 2026 GMT
api.upsun.com
HTTPS: yes · TLS: TLSv1.3 · HSTS: yes · cert expires: Nov 8 19:07:59 2026 GMT
platform.sh
HTTPS: yes · TLS: TLSv1.3 · HSTS: yes · cert expires: Nov 17 11:12:08 2026 GMT
auth.api.platform.sh
HTTPS: yes · TLS: TLSv1.3 · HSTS: yes · cert expires: Nov 12 07:48:36 2026 GMT

Domain (DNS/Email) Security

upsun.com
DNSSEC: yes · SPF: yes · DMARC: yes (p=quarantine) · CAA: none
platform.sh
DNSSEC: no · SPF: yes · DMARC: yes (p=quarantine) · CAA: yes

Source

Domain Security

Raw ↑ 
generated: '2026-08-26'
method: probed
source: live DNS/TLS/HTTP probes of apis.yml + OpenAPI hosts, plus manual dig/openssl probes of platform.sh and
  auth.api.platform.sh
hosts:
- host: upsun.com
  https: true
  tls_version: TLSv1.3
  cert_expires: Nov  2 03:17:46 2026 GMT
  hsts: true
  hsts_max_age: 31557600
- host: developer.upsun.com
  https: true
  tls_version: TLSv1.3
  cert_expires: Oct 11 13:16:30 2026 GMT
  hsts: true
  hsts_max_age: 63072000
- host: api.upsun.com
  https: true
  tls_version: TLSv1.3
  cert_expires: Nov  8 19:07:59 2026 GMT
  hsts: true
  hsts_max_age: 63072000
- host: platform.sh
  https: true
  tls_version: TLSv1.3
  cert_expires: Nov 17 11:12:08 2026 GMT
  hsts: true
  hsts_max_age: 31557600
  note: Legacy brand host. Serves /.well-known/security.txt directly (200); / 301s to upsun.com.
- host: auth.api.platform.sh
  https: true
  tls_version: TLSv1.3
  cert_expires: Nov 12 07:48:36 2026 GMT
  hsts: true
  hsts_max_age: 31536000
  hsts_preload: true
  note: OAuth 2.0 authorization server for the REST API; still on the platform.sh domain after the Upsun rebrand.
domains:
- domain: upsun.com
  dnssec: true
  caa: []
  spf: true
  dmarc: true
  dmarc_policy: quarantine
- domain: platform.sh
  dnssec: false
  caa:
  - pki.goog
  - sectigo.com
  - amazontrust.com
  - digicert.com
  - letsencrypt.org
  spf: true
  dmarc: true
  dmarc_policy: quarantine
  note: Probed 2026-08-26 via dig/openssl. No DS record published, so DNSSEC is not enabled on platform.sh.

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools

Call it yourself

curl for this page
This security artifact 
curl "https://apis.io/api/v1/security/platform.sh-domain-security"
All security posture 
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.