Skip to main content
SGSiteGraph

strapi.io

Strapi - Open-Source TypeScript Headless CMS

Last scanned Jul 26, 2026, 5:17 AM · 2 views

86

Overall score

Great

Summary

Strapi is the next-gen headless CMS, open-source, JavaScript/TypeScript, enabling content-rich experiences to be created, managed and exposed to any device. This website uses Next.js hosted on AWS behind Vercel CDN. SEO is excellent (95/100) and accessibility is excellent (100/100). Security scores good (75/100) and performance good (75/100). Top issue: sitemap.xml not found.

Strapi is the next-gen headless CMS, open-source, JavaScript/TypeScript, enabling content-rich experiences to be created, managed and exposed to any device.

United States
Hosted on AWS

Products & pricing

Product and pricing information published in this site's own structured data.

Find the CMS plan that works for you

$45 USD

Top issues to fix

6 issues found · 1 high priority

  • Missing Content-Security-Policy header

    Security

    Add a CSP to control which sources can run scripts — the strongest single defense against XSS.

  • Missing X-Content-Type-Options header

    Security

    Add X-Content-Type-Options: nosniff to stop MIME-sniffing attacks.

  • Missing X-Frame-Options header

    Security

    Add X-Frame-Options (or a CSP frame-ancestors rule) to prevent clickjacking via hidden iframes.

  • 1 cookie without Secure/HttpOnly flags

    Security

    Set Secure and HttpOnly on session cookies so they can't leak over HTTP or be read by injected scripts.

  • sitemap.xml not found

    SEO

    Publish an XML sitemap and reference it from robots.txt to speed up page discovery.

  • 2 broken links on the page

    SEO

    Fix or remove broken links — they waste crawl budget and erode user trust.

95

SEO

1 issue(s) found

75

Performance

65 ms

75

Security

HTTPS & header checks

100

Accessibility

0 issue(s) found

Not enough scan history yet to show a trend — check back after this site has been re-scanned a few more times.

Organization

Company details published in this site's own structured data.

Strapi is the next-gen headless CMS, open-source, JavaScript/TypeScript, enabling content-rich experiences to be created, managed and exposed to any device.

Contact

Email, phone, and address published on this site's own pages.

Meta tags

Title
Strapi - Open-Source TypeScript Headless CMS
Description
Strapi is the next-gen headless CMS, open-source, JavaScript/TypeScript, enabling content-rich experiences to be created, managed and exposed to any device.
Canonical
https://strapi.io
Language
en
Charset
utf-8
Viewport
width=device-width, initial-scale=1
Robots meta
index, follow
Manifest
https://strapi.io/site.webmanifest

OpenGraph & Twitter Card

OpenGraph

og:title
Strapi - Open-Source TypeScript Headless CMS
og:description
Strapi is the next-gen headless CMS, open-source, JavaScript/TypeScript, enabling content-rich experiences to be created, managed and exposed to any device.
og:type
website
og:url
https://strapi.io

Twitter Card

twitter:card
summary_large_image
twitter:title
Strapi - Open-Source TypeScript Headless CMS
twitter:description
Strapi is the next-gen headless CMS, open-source, JavaScript/TypeScript, enabling content-rich experiences to be created, managed and exposed to any device.

Technologies

Detected frameworks, languages, and tools.

Hosting & CDN

Hosting provider
AWS
CDN provider
Vercel
IP address
18.239.111.107
ASN
AS16509 (AMAZON-02 - Amazon.com, Inc., US)

DNS records

TypeValue
A
  • 18.239.111.107
  • 18.239.111.28
  • 18.239.111.109
  • 18.239.111.37
AAAA
MX
  • alt2.aspmx.l.google.com
  • aspmx.l.google.com
  • alt4.aspmx.l.google.com
  • alt3.aspmx.l.google.com
  • alt1.aspmx.l.google.com
TXT
NS
  • ns-1294.awsdns-33.org
  • ns-443.awsdns-55.com
  • ns-1706.awsdns-21.co.uk
  • ns-556.awsdns-05.net
CAA
CNAME
IPv6 supportNo

TLS / SSL certificate

Version
TLS 1.3
Issuer
Amazon
Subject
strapi.io
Valid from
Apr 24, 2026
Valid to
Nov 7, 2026
Days until expiry
104
SAN domains
strapi.io, *.strapi.io

Security headers

  • Strict-Transport-SecurityEnabled
  • Content-Security-PolicyMissing
  • X-Frame-OptionsMissing
  • X-Content-Type-OptionsMissing
  • Referrer-PolicyMissing
  • Permissions-PolicyMissing

Compression: gzip · 1 cookie(s) observed

Content & assets

Headings

H1 1 · H2 7 · H3 15

Links

40 internal · 33 external · 2 broken

Images

55 total · 0 missing alt

Scripts / Styles

124 scripts · 2 stylesheets

JS / CSS size

2.1 MB · 200 KB

Page size

377 KB

Robots.txt & Sitemap

robots.txt
Found
Disallow rules
1
sitemap.xml
Not found
URLs in sitemap
0

SEO issues

  • sitemap.xml not found

Accessibility issues

No accessibility issues detected.

Careers

View careers page

This company has an active careers page, but individual openings weren't reliably parsed from it — visit the page above for current listings.

Scan details

Requested URL
https://strapi.io
Final URL
https://strapi.io
HTTP status
200
HTTP version
HTTP/1.1
Response time
58 ms
HTML size
377 KB
Redirect chain
https://strapi.io

See something wrong on this report? Request a correction

Frequently asked questions

What technology does strapi.io use?
strapi.io is built with Next.js, Svelte.
Is strapi.io secure (HTTPS)?
Yes. strapi.io uses TLS 1.3 with a certificate issued by Amazon, valid until Nov 7, 2026.
Who hosts strapi.io?
strapi.io is hosted on AWS, behind Vercel CDN.
What is strapi.io's SEO score?
strapi.io scored 95/100 for SEO in the latest analysis (excellent).
What is strapi.io's overall website score?
strapi.io has an overall SiteGraph score of 86/100, combining SEO, performance, security, and accessibility.
What products does strapi.io offer?
strapi.io offers Find the CMS plan that works for you.
Is strapi.io hiring?
strapi.io has a careers page; check it directly for current openings.