Technology
Yes, dev.to is generally a trustworthy website with a score of 94. However, there are some points to consider.
DEV Community is a platform for software developers to discuss and manage their careers through posts and articles.
Verisite checked dev.to on July 4, 2026 and gave it a trust score of 91/100. Out of 92 checks, 74 passed, with 14 warning(s) and 4 failed check(s).
91
/100
Trust Score
Excellent
Score incl. subdomains: 65/100
10
Passed
1
Warning
1
Failed
Security Headers
Checks HTTP security headers and cookie security configuration.
Security headers are well configured.
Information Exposure
Checks for exposed sensitive files, directory listings, and information disclosure.
Exposed files or directories were found that may contain sensitive information.
Content Security
Scans page content for suspicious scripts, iframes, external forms, and cryptominers.
No suspicious content detected on the page.
SSL Certificate
Verifies the SSL/TLS certificate validity and configuration.
Valid SSL certificate found (expires 2026-12-12).
Domain Age
Checks the age of the domain registration. Very young domains are often associated with fraud.
This domain has been registered since 2016-04-05.
Privacy & Cookies
Checks for tracking cookies, consent mechanisms, and third-party trackers.
No tracking cookies or third-party trackers detected.
Business Data
Checks for chamber of commerce number, VAT number, contact details, and required legal pages.
An error occurred while performing this check.
Reviews & Trust Seals
Checks external reviews (Trustpilot) and trust seals (Kiyoh, WebwinkelKeur).
No reviews or trust seal found.
Malicious / Safety
Checks if the domain appears on known fraud or phishing lists.
This domain was not found on any known fraud or phishing lists.
Technology & Software
Detects CMS, frameworks, and JavaScript libraries and checks for outdated versions.
No outdated or vulnerable software detected.
Email Authentication
Analyzes SPF, DKIM and DMARC configuration for email authentication.
Email authentication is well configured with SPF, DKIM and/or DMARC.
Network & Transport
Checks open ports, HTTP protocol support, redirect chain, and mixed content.
Network configuration is secure and well optimized.
DNS & Server
Checks DNS records, server information and hosting details.
DNS records are properly configured.
Security Headers
Checks HTTP security headers and cookie security configuration.
75/100
Security headers are well configured.
- Domain
- dev.to
- Cookies
-
- Total: 0
- Issues:
- Secure cookies: 0
- Insecure cookies: 0
- HSTS max-age
- 31557600
- Missing headers
- X-Frame-Options, Permissions-Policy
- HSTS preload
- No
- Used browser fallback
- No
- Referrer-Policy
- Yes
- X-Frame-Options
- No
- HSTS includes subdomains
- No
- Permissions-Policy
- No
- X-Content-Type-Options
- Yes
- Content-Security-Policy
- Yes
- Strict-Transport-Security
- Yes
Technology & Software
Detects CMS, frameworks, and JavaScript libraries and checks for outdated versions.
100/100
No outdated or vulnerable software detected.
- Detected CMS
-
- Name:
- Slug:
- Version:
- Detected: No
- Confidence: none
- Domain
- dev.to
- JavaScript libraries
- Pages scanned
- 12
- Vulnerable libraries
- Server technology
-
- Server: Heroku
- Powered by:
- X generator:
Information Exposure
Checks for exposed sensitive files, directory listings, and information disclosure.
90/100
Exposed files or directories were found that may contain sensitive information.
- Domain
- dev.to
- Exposures
-
- /.DS_Store — medium — macOS directory structure exposed
- Robots.txt analysis
-
- Exists: Yes
- Interesting paths: /admin/*
- Paths checked
- 18
- Exposures found
- 1
- Directory listing enabled
- No
Email Authentication
Analyzes SPF, DKIM and DMARC configuration for email authentication.
61/100
Email authentication is well configured with SPF, DKIM and/or DMARC.
- SPF
-
- Exists: Yes
- Policy: softfail
- Record: v=spf1 a mx include:_spf.google.com include:sendgrid.net include:servers.mcsv.net include:shops.shopify.com ~all
- Mechanisms: a, mx, include:_spf.google.com, include:sendgrid.net, include:servers.mcsv.net, include:shops.shopify.com, all
- Policy label: checks.email_spf_softfail
- Authorized senders: Eigen servers, Mailservers (MX), Google Workspace, SendGrid, Mailchimp, shops.shopify.com
- DKIM
-
- Found: Yes
- Selectors: google, k1, s1, s2
- DMARC
-
- Exists: Yes
- Policy: none
- Record: v=DMARC1; p=none;
- Percentage:
- Policy label: checks.email_dmarc_none
- Has reporting: No
- Subdomain policy:
- Domain
- dev.to
- Authorized senders
- Eigen servers, Mailservers (MX), Google Workspace, SendGrid, Mailchimp, shops.shopify.com
Domain Age
Checks the age of the domain registration. Very young domains are often associated with fraud.
100/100
This domain has been registered since 2016-04-05.
- Domain
- dev.to
- Registrar
- Government of Kingdom of Tonga
- Registered
- 2016-04-05
- Age (days)
- 3742
- Expires
- 2027-04-05
Privacy & Cookies
Checks for tracking cookies, consent mechanisms, and third-party trackers.
100/100
No tracking cookies or third-party trackers detected.
- Domain
- dev.to
- Detected trackers
- Pages scanned
- 14
- Total cookies
- 0
- Third-party trackers found
- 0
- Consent platform
- Cookie Consent
- Tracking cookies
- Consent mechanism detected
- Yes
- Tracking cookies found
- 0
Network & Transport
Checks open ports, HTTP protocol support, redirect chain, and mixed content.
85/100
Network configuration is secure and well optimized.
- Domain
- dev.to
- Open ports
- HTTP version
- HTTP/2
- Mixed content domains
- Pages scanned
- 13
- Redirect chain
- HTTP/2 support
- Yes
- HTTP/3 support
- No
- Open ports found
- 0
- Redirect loop detected
- No
- Mixed content resources
- 0
- Redirect chain length
- 0
- HTTP redirects to HTTPS
- No
Content Security
Scans page content for suspicious scripts, iframes, external forms, and cryptominers.
100/100
No suspicious content detected on the page.
- Domain
- dev.to
- Cryptominer scripts
- Pages scanned
- 15
- External form domains
- External script sources
- Obfuscation patterns
- 0
- Cryptominers detected
- 0
- Suspicious iframe details
- External form targets
- 0
- Obfuscated code patterns
- External script domains
- 0
- Suspicious iframes
- 0
Business Data
Checks for chamber of commerce number, VAT number, contact details, and required legal pages.
0/100
An error occurred while performing this check.
- Check
- Business Data
Reviews & Trust Seals
Checks external reviews (Trustpilot) and trust seals (Kiyoh, WebwinkelKeur).
10/100
No reviews or trust seal found.
- Domain
- dev.to
- Kiyoh trust seal found
- No
- Trust seal present
- No
- Review sources
- Trustpilot page
- https://www.trustpilot.com/review/dev.to
- Trustpilot profile found
- No
- WebwinkelKeur trust seal found
- No
Malicious / Safety
Checks if the domain appears on known fraud or phishing lists.
100/100
This domain was not found on any known fraud or phishing lists.
- Checked domain
- dev.to
SSL Certificate
Verifies the SSL/TLS certificate validity and configuration.
90/100
Valid SSL certificate found (expires 2026-12-12).
- Expiry date
- 2026-12-12
- Issuer
- GlobalSign nv-sa
- Subject
- dev.to
- Valid until
- 2026-12-12
- Valid from
- 2025-11-10
- TLS version
- TLSv1.2
- Serial number
- 010CF11374FBC56D194B063D5726A005
DNS & Server
Checks DNS records, server information and hosting details.
90/100
DNS records are properly configured.
- IP Address
- 151.101.194.217
- SPF record
- Yes
- IPv6 support
- No
- DMARC record
- Yes
- DNSSEC
- No
- MX Records
- smtp.google.com
- Nameservers
- jill.ns.cloudflare.com, josh.ns.cloudflare.com
- IP Addresses
- 151.101.194.217, 151.101.130.217, 151.101.66.217, 151.101.2.217
- IPv6 Addresses
Discovered subdomains (3)
About this website
DEV Community is a space for software developers to discuss and keep up with software development. The platform allows users to manage their careers through posts and articles. With a focus on technology and collaboration, it serves as a valuable resource for developers.
Key facts about dev.to include its SSL certificate, ensuring that your data is secure during transmission. The website scores well on various security requirements, such as privacy and technology. However, it has a low score for reviews, which is an important point of concern.
What our scores mean for you
While dev.to has a high score, there are some risks. The warning for exposure indicates partial issues that may affect trust. Additionally, the low score for reviews presents a concrete user risk; this could mean that user experiences are not positive or that there is little feedback available.
What this means
Verisite is an independent platform that runs automated trust checks on websites. This specific score of 94 indicates that dev.to is generally trustworthy, but you should be cautious regarding user feedback. For visitors, this means being aware of potential risks, while for the company, it presents an opportunity to improve user experience.
Frequently asked questions
Does dev.to have a valid SSL certificate?
Yes, dev.to has a valid SSL certificate, ensuring your data is secure.
Has dev.to ever been reported for fraud?
No external red flags or evidence of fraud have been found for dev.to.
What are the risks of using dev.to?
The main risks are the low score for reviews and the warning for exposure, which may impact trust.
How old is the dev.to domain?
The dev.to domain has a high score for domain age, indicating it has been active for a considerable time.
What is the privacy status of dev.to?
Dev.to scores 100 for privacy, indicating they handle user data well.
Is there external evidence of problems with dev.to?
No, there is no external evidence or red flags indicating issues with dev.to.