Shopping
Yes, notion.so is generally trustworthy with a score of 93. However, there are some warnings you should consider.
Notion is an AI workspace that helps teams work more efficiently by building custom agents and automating busywork.
Verisite checked notion.so on July 2, 2026 and gave it a trust score of 93/100. Out of 89 checks, 65 passed, with 19 warning(s) and 5 failed check(s).
93
/100
Trust Score
Excellent
Score incl. subdomains: 67/100
9
Passed
3
Warning
1
Failed
Security Headers
Checks HTTP security headers and cookie security configuration.
Some security headers are missing or weakly configured.
Information Exposure
Checks for exposed sensitive files, directory listings, and information disclosure.
No exposed sensitive files or directories found.
Content Security
Scans page content for suspicious scripts, iframes, external forms, and cryptominers.
No suspicious content detected on the page.
SSL Certificate
Verifies the SSL/TLS certificate validity and configuration.
Valid SSL certificate found (expires 2026-09-13).
Domain Age
Checks the age of the domain registration. Very young domains are often associated with fraud.
The domain age could not be determined.
Privacy & Cookies
Checks for tracking cookies, consent mechanisms, and third-party trackers.
No tracking cookies or third-party trackers detected.
Business Data
Checks for chamber of commerce number, VAT number, contact details, and required legal pages.
Business data is well represented on the website.
Reviews & Trust Seals
Checks external reviews (Trustpilot) and trust seals (Kiyoh, WebwinkelKeur).
No reviews or trust seal found.
Malicious / Safety
Checks if the domain appears on known fraud or phishing lists.
This domain was not found on any known fraud or phishing lists.
Technology & Software
Detects CMS, frameworks, and JavaScript libraries and checks for outdated versions.
No outdated or vulnerable software detected.
Email Authentication
Analyzes SPF, DKIM and DMARC configuration for email authentication.
Email authentication is partially configured. Some protocols are missing or weakly configured.
Network & Transport
Checks open ports, HTTP protocol support, redirect chain, and mixed content.
Network configuration is secure and well optimized.
DNS & Server
Checks DNS records, server information and hosting details.
No MX records found. The domain cannot receive email.
Security Headers
Checks HTTP security headers and cookie security configuration.
40/100
Some security headers are missing or weakly configured.
- Domain
- notion.so
- Cookies
-
- Total: 2
- Issues: notion_check_cookie_consent: missing Secure flag, notion_check_cookie_consent: missing SameSite attribute
- Secure cookies: 1
- Insecure cookies: 1
- HSTS max-age
- 31536000
- Information leaking headers
- X-Powered-By
- Missing headers
- X-Content-Type-Options, X-Frame-Options, Permissions-Policy
- HSTS preload
- Yes
- Leaks X-Powered-By
- Next.js
- CSP contains unsafe-eval
- Yes
- CSP contains unsafe-inline
- Yes
- Used browser fallback
- No
- Referrer-Policy
- Yes
- X-Frame-Options
- No
- HSTS includes subdomains
- Yes
- Permissions-Policy
- No
- X-Content-Type-Options
- No
- Content-Security-Policy
- Yes
- Strict-Transport-Security
- Yes
Technology & Software
Detects CMS, frameworks, and JavaScript libraries and checks for outdated versions.
100/100
No outdated or vulnerable software detected.
- Detected CMS
-
- Name:
- Slug:
- Version:
- Detected: No
- Confidence: none
- Domain
- notion.so
- JavaScript libraries
- Pages scanned
- 11
- Vulnerable libraries
- Server technology
-
- Server: cloudflare
- Powered by: Next.js
- X generator:
Information Exposure
Checks for exposed sensitive files, directory listings, and information disclosure.
100/100
No exposed sensitive files or directories found.
- Domain
- notion.so
- Exposures
- Robots.txt analysis
-
- Exists: Yes
- Interesting paths:
- Paths checked
- 18
- Exposures found
- 0
- Directory listing enabled
- No
Email Authentication
Analyzes SPF, DKIM and DMARC configuration for email authentication.
50/100
Email authentication is partially configured. Some protocols are missing or weakly configured.
- SPF
-
- Exists: Yes
- Policy: softfail
- Record: v=spf1 ~all
- Mechanisms: all
- Policy label: checks.email_spf_softfail
- Authorized senders:
- DKIM
-
- Found: No
- Selectors:
- DMARC
-
- Exists: Yes
- Policy: quarantine
- Record: v=DMARC1; p=quarantine; pct=100; rua=mailto:re+1b3a27dd30bc@inbound.dmarcdigests.com;
- Percentage: 100
- Policy label: checks.email_dmarc_quarantine
- Has reporting: Yes
- Subdomain policy:
- Domain
- notion.so
- Authorized senders
Domain Age
Checks the age of the domain registration. Very young domains are often associated with fraud.
100/100
The domain age could not be determined.
- Domain
- notion.so
Privacy & Cookies
Checks for tracking cookies, consent mechanisms, and third-party trackers.
100/100
No tracking cookies or third-party trackers detected.
- Domain
- notion.so
- Detected trackers
- Pages scanned
- 14
- Total cookies
- 2
- Third-party trackers found
- 0
- Consent platform
- TCF (IAB Framework)
- Tracking cookies
- Consent mechanism detected
- Yes
- Tracking cookies found
- 0
Network & Transport
Checks open ports, HTTP protocol support, redirect chain, and mixed content.
100/100
Network configuration is secure and well optimized.
- Domain
- notion.so
- Open ports
- HTTP version
- HTTP/2
- Mixed content domains
- Pages scanned
- 14
- Redirect chain
- http://notion.so, https://www.notion.so/
- HTTP/2 support
- Yes
- HTTP/3 support
- Yes
- Open ports found
- 0
- Redirect loop detected
- No
- Mixed content resources
- 0
- Redirect chain length
- 2
- HTTP redirects to HTTPS
- Yes
Content Security
Scans page content for suspicious scripts, iframes, external forms, and cryptominers.
100/100
No suspicious content detected on the page.
- Domain
- notion.so
- Cryptominer scripts
- Pages scanned
- 14
- External form domains
- External script sources
- Obfuscation patterns
- 0
- Cryptominers detected
- 0
- Suspicious iframe details
- External form targets
- 0
- Obfuscated code patterns
- External script domains
- 0
- Suspicious iframes
- 0
Business Data
Checks for chamber of commerce number, VAT number, contact details, and required legal pages.
75/100
Business data is well represented on the website.
- Domain
- notion.so
- Email address present
- Yes
- Phone number present
- Yes
- Terms and conditions present
- Yes
- Chamber of Commerce number found
- No
- Terms and conditions page
- /terms
- VAT number found
- No
- Physical address present
- No
- Pages scanned
- 13
- Return policy present
- No
- Privacy policy present
- Yes
- Privacy policy page
- /Terms-and-Privacy-28ffdd083dc3473e9c2da6ec011b58ac
- Contact details found
- 2
Reviews & Trust Seals
Checks external reviews (Trustpilot) and trust seals (Kiyoh, WebwinkelKeur).
10/100
No reviews or trust seal found.
- Domain
- notion.so
- Kiyoh trust seal found
- No
- Trust seal present
- No
- Review sources
- Trustpilot page
- https://www.trustpilot.com/review/notion.so
- Trustpilot profile found
- No
- WebwinkelKeur trust seal found
- No
Malicious / Safety
Checks if the domain appears on known fraud or phishing lists.
100/100
This domain was not found on any known fraud or phishing lists.
- Checked domain
- notion.so
SSL Certificate
Verifies the SSL/TLS certificate validity and configuration.
100/100
Valid SSL certificate found (expires 2026-09-13).
- Expiry date
- 2026-09-13
- Issuer
- Google Trust Services
- Subject
- notion.so
- Valid until
- 2026-09-14
- Valid from
- 2026-06-16
- TLS version
- TLSv1.3
- Serial number
- D40D8C890FC116A70E129AD75161DAB2
DNS & Server
Checks DNS records, server information and hosting details.
80/100
No MX records found. The domain cannot receive email.
- IP Address
- 208.103.161.2
- SPF record
- Yes
- IPv6 support
- Yes
- DMARC record
- Yes
- DNSSEC
- No
- MX Records
- Nameservers
- woz.ns.cloudflare.com, dana.ns.cloudflare.com
- IP Addresses
- 208.103.161.2, 208.103.161.1
- IPv6 Addresses
- 2602:f79a::1, 2602:f79a::2
Discovered subdomains (3)
About this website
Notion is an AI workspace focused on enhancing productivity and collaboration within teams. With features like building custom agents and searching across various apps, Notion provides a platform where users can automate their busy work.
Key facts about Notion include high scores for technology, privacy, and network security, but there are also some warnings and an issue with reviews that you should be aware of.
What our scores mean for you
The warnings regarding security headers and email authentication indicate possible weaknesses that may affect trust in the site. This means you should be cautious when sharing sensitive information. The failing reviews may also suggest a lack of user feedback, which could pose a risk for new customers.
Score evolution
There is no previous score available for notion.so, so we cannot compare it to past results.
What this means
Verisite is an independent platform that runs automated trust checks on websites. For visitors, this score means that notion.so is generally trustworthy, but there are some points to consider. For the company itself, improving the reviews and addressing the warnings can help increase user trust.
Frequently asked questions
Does notion.so have a valid SSL certificate?
Yes, notion.so has a valid SSL certificate, meaning your connection is secure.
Has notion.so ever been reported for fraud?
No external red flags or evidence of fraud have been found for notion.so.
Why are there warnings for security headers?
The warning for security headers means there are partial issues that may affect trust in the site.
What does it mean that the reviews have failed?
The failing reviews indicate a concrete risk for users, possibly due to a lack of feedback.
Is my personal information safe on notion.so?
While notion.so has a high score, there are some warnings advising caution when sharing personal information.
How long has notion.so been around?
Notion has a high score for domain age, indicating it has been active for a considerable time.