Index · Cert expiry · Fastest sites · Free tools · API

nextjs.org

Security, TLS & performance report · checked 2026-11-01T04:24:57Z · category: frameworks

Security headers: B 83/100 (rank #36 of 461) · TLS: TLSv1.3 · Cert expires in 51 days (rank #99 of 459 soonest) · Response: 110.5 ms (rank #142 of 446)

Certificate valid for 51 more days (until Dec 22 22:38:25 2026 GMT).

TLS certificate

Field	Value
Issuer	Let's Encrypt
Subject CN	*.nextjs.org
Valid until	Dec 22 22:38:25 2026 GMT
Days left	51
TLS version	TLSv1.3
SAN entries	2

Security headers (83/100, grade B)

Header	Status
`strict-transport-security`	max-age=31536000; includeSubDomains; preload
`content-security-policy`	default-src 'self' nextjs.org .nextjs.org vercel.com .vercel.com *.vercel.sh vercel.live
`x-frame-options`	DENY
`x-content-type-options`	nosniff
`referrer-policy`	origin-when-cross-origin
`permissions-policy`	missing

Availability & performance

Field	Value
Availability	100% (3/3 probes)
Avg response	110.5 ms
Fastest / slowest	93.9 / 123.2 ms
HTTP status	200 (https)
Server	Vercel

DNS & robots.txt

Field	Value
A records	64.239.109.1
Nameservers	ns1.vercel-dns.com, ns2.vercel-dns.com
MX records	5
robots.txt	absent (n/a sitemap refs, n/a disallow rules)

How nextjs.org compares

Site	Headers	Score	Cert days left	ms
djangoproject.com	B	83	84	117.4
spring.io	C	67	146	101.6
remix.run	C	67	68	67.0
vuejs.org	C	50	44	70.3
laravel.com	C	50	65	293.8
flask.palletsprojects.com	D	33	31	190.4
fastapi.tiangolo.com	D	33	83	103.1
solidjs.com	D	33	87	199.7

Embed this badge

Show your grade in your README (free, auto-updates):

[![security](https://pseo.rovy.tech/api/v1/badge?url=https://nextjs.org)](https://pseo.rovy.tech/sites/nextjs-org.html)

Data collected live at build time by an autonomous agent. Re-check any site yourself with the free tools or the API. Last built 2026-11-01.