Description:

Google API JavaScript Client Library is a JavaScript library that simplifies accessing Google APIs from web applications. It provides authentication, request handling, and response processing to help developers integrate Google services like Gmail, Drive, and Calendar into their web applications.

Evidence:

• • Header Content-Security-Policy (child-src): https://content.googleapis.com
• • Header Content-Security-Policy (script-src): https://apis.google.com

Description:

Google Sign-In (Google Identity Services) is an authentication service that allows users to sign in to websites and applications using their Google accounts. It provides secure authentication, user profile information, and OAuth integration to help developers implement social login functionality.

Evidence:

• • Header Content-Security-Policy (child-src): https://accounts.google.com/gsi/
• • Header Content-Security-Policy (child-src): https://accounts.google.com/gsi/
• • Header Content-Security-Policy (connect-src): https://accounts.google.com/gsi/
• • Header Content-Security-Policy (connect-src): https://accounts.google.com/gsi/
• • Header Content-Security-Policy (script-src): https://accounts.google.com/gsi/client
• ... and 4 more

Description:

Recurly is a subscription billing and revenue management platform that helps businesses manage recurring billing, invoicing, and subscription lifecycles. It provides payment processing, dunning, and analytics for subscription-based businesses.

Evidence:

• • Header Content-Security-Policy (child-src): https://api.recurly.com
• • Header Content-Security-Policy (connect-src): https://api.recurly.com
• • Header Content-Security-Policy (script-src): https://js.recurly.com
• • Header Content-Security-Policy (style-src): https://js.recurly.com

Description:

Cloudflare is a global cloud services provider that offers CDN, DDoS protection, DNS, security, and performance optimization services. It helps websites and applications improve speed, security, and reliability through its global network of data centers.

Evidence:

• • IP 2606:4700:20:0:0:0:681A:C09 → ASN 13335 (Cloudflare)
• • IP 199.60.103.228 → ASN 209242 (Cloudflare)

Description:

Heroku is a Platform-as-a-Service (PaaS) that enables developers to deploy, manage, and scale applications in the cloud. It provides a simple deployment process, automatic scaling, add-ons marketplace, and support for multiple programming languages and frameworks.

Evidence:

• • Header Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=blynBNzF6rMLUpEEsUaU67CtO7zQHksRLyuhnex8lf0%3D\u0026sid=af571f24-03ee-46d1-9f90-ab9030c2c74c\u0026ts=1778335023"}],"max_age":3600}
• • Header Via: 2.0 heroku-router

Description:

Microsoft is a multinational technology company that develops and licenses software, cloud services, and hardware products. It provides operating systems, productivity applications, cloud computing, and enterprise technology solutions.

Evidence:

• • DNS Record TXT: MS=ms55666265 (root domain: ynab.com)

Description:

Figma is a collaborative design tool that allows teams to create, prototype, and collaborate on designs in real-time. It's a browser-based design platform that enables designers and developers to work together on user interfaces, design systems, and interactive prototypes.

Evidence:

• • DNS Record TXT: figma-domain-verification=15d04eacd447517a26841ef1b417047e8ae5a8cc43b27da12374cbc03483730f-1723563181 (root domain: ynab.com)

Description:

Mailchimp is an all-in-one marketing platform that provides email marketing, marketing automation, CRM, and analytics tools. It helps businesses create and send email campaigns, manage contacts, and track marketing performance across channels.

Evidence:

• • DNS Record TXT (SPF): v=spf1 include:_spf.google.com include:servers.mcsv.net include:spf.mandrillapp.com include:m.lessonly.com include:39496842.spf10.hubspotemail.net -all (root domain: ynab.com)

Description:

Mandrill is a transactional email service from Mailchimp that provides APIs for sending transactional emails from applications. It offers email delivery, tracking, and analytics for developers who need to send automated emails like receipts, notifications, and password resets.

Evidence:

• • DNS Record TXT (SPF): v=spf1 include:_spf.google.com include:servers.mcsv.net include:spf.mandrillapp.com include:m.lessonly.com include:39496842.spf10.hubspotemail.net -all (root domain: ynab.com)

Description:

Postmark is a transactional email service that focuses on deliverability and reliability. It provides fast, reliable email delivery for transactional emails like receipts, notifications, and password resets, with detailed analytics and bounce handling to ensure emails reach the inbox.

Evidence:

• • DMARC RUA: mailto:re+b308mv2sgan@dmarc.postmarkapp.com

Description:

Plaid is a financial data network that connects applications to users' bank accounts and financial institutions. It provides APIs for account connectivity, transaction data, identity verification, and payment enablement for fintech and financial services applications.

Evidence:

• • Header Content-Security-Policy (child-src): https://cdn.plaid.com
• • Header Content-Security-Policy (script-src): https://cdn.plaid.com

Description:

Datadog is a monitoring and analytics platform that provides infrastructure monitoring, application performance monitoring (APM), log management, and security monitoring. It helps businesses observe and optimize their entire technology stack in real-time.

Evidence:

• • Header Content-Security-Policy (connect-src): https://browser-intake-datadoghq.com

Description:

Rollbar is an error tracking and debugging platform that helps development teams find and fix errors in production. It provides real-time error alerts, stack traces, and deployment tracking for web and mobile applications.

Evidence:

• • Header Content-Security-Policy (connect-src): https://api.rollbar.com
• • Header Content-Security-Policy (script-src): https://cdn.rollbar.com

Description:

1Password is a password manager and digital vault that securely stores passwords, credit cards, documents, and other sensitive information. It provides secure password generation, autofill, and synchronization across devices, helping users maintain strong, unique passwords for all their accounts.

Evidence:

• • DNS Record TXT: 1password-site-verification=ERJBQFK2IVBCVIM4OJPGJ4AYAI (root domain: ynab.com)

Description:

Google Search Console (formerly Google Webmaster Tools) is a free service from Google that helps website owners monitor and maintain their site's presence in Google search results. It provides insights into search performance, indexing status, and technical SEO issues.

Evidence:

• • DNS Record TXT: google-site-verification=YPeLAPtarOxZ9hEBcf_vWSNc9HcneDH113euyxoVwbc (root domain: ynab.com)

Description:

Cloudflare Stream is a video-on-demand platform that provides video hosting, encoding, and delivery services. It offers global CDN distribution, adaptive bitrate streaming, and video analytics to help businesses deliver high-quality video content to users worldwide.

Evidence:

• • Header Content-Security-Policy (connect-src): https://customer-loyddpjksb0o2y3b.cloudflarestream.com
• • Header Content-Security-Policy (media-src): https://customer-loyddpjksb0o2y3b.cloudflarestream.com

Description:

YouTube is the world's largest video-sharing platform, owned by Google. It allows users to upload, share, and view videos, serving as a platform for entertainment, education, marketing, and content creation. YouTube also provides APIs and embedding capabilities for businesses to integrate video into their websites.

Evidence:

• • Header Content-Security-Policy (child-src): https://www.youtube-nocookie.com
• • Header Content-Security-Policy (child-src): https://www.youtube.com