Description:

Google API JavaScript Client Library is a JavaScript library that simplifies accessing Google APIs from web applications. It provides authentication, request handling, and response processing to help developers integrate Google services like Gmail, Drive, and Calendar into their web applications.

Evidence:

• • Header Content-Security-Policy (img-src): https://*.googleapis.com

Description:

Wufoo is a form builder and survey tool that helps users create online forms, surveys, and invitations. It provides templates, integrations, and data collection tools; it is part of the SurveyMonkey suite.

Evidence:

• • Header Content-Security-Policy (frame-src): https://*.wufoo.com
• • Header Content-Security-Policy (script-src): https://*.wufoo.com

Description:

Travis CI is a continuous integration and deployment service that builds and tests code from GitHub and Bitbucket. It provides automated builds, testing, and deployment for open-source and private projects.

Evidence:

• • Header Content-Security-Policy (img-src): https://travis-ci.org
• • Header Content-Security-Policy (img-src): https://api.travis-ci.org

Description:

AWS (Amazon Web Services) is Amazon's cloud computing platform that provides a wide range of cloud services including computing, storage, databases, networking, analytics, machine learning, and more. It's one of the leading cloud infrastructure providers globally.

Evidence:

• • IP 3.167.88.26 → ASN 16509 (Amazon)

Description:

Cloudflare is a global cloud services provider that offers CDN, DDoS protection, DNS, security, and performance optimization services. It helps websites and applications improve speed, security, and reliability through its global network of data centers.

Evidence:

• • IP 104.20.44.163 → ASN 13335 (Cloudflare)

Description:

DigitalOcean is a cloud infrastructure provider that offers managed DNS services along with cloud computing, storage, and networking solutions. It provides simple DNS management integrated with its cloud platform.

Evidence:

• • IP 157.245.12.71 → ASN 14061 (DigitalOcean)

Description:

Google Cloud Platform (GCP) is Google's comprehensive cloud computing platform that provides computing, storage, databases, networking, machine learning, and analytics services. It offers enterprise-grade cloud infrastructure and services for businesses of all sizes.

Evidence:

• • Header Content-Security-Policy (script-src): https://*.gstatic.com
• • Header Content-Security-Policy (style-src): https://*.gstatic.com
• • Header Content-Security-Policy (img-src): https://*.gstatic.com

Description:

Google Search is Google's web search engine that indexes and provides search results for websites and content across the internet. It's the most widely used search engine globally, providing search functionality and search-related services for users and businesses.

Evidence:

• • Header Content-Security-Policy (script-src): https://www.google.com
• • Header Content-Security-Policy (style-src): https://www.google.com

Description:

Microsoft is a multinational technology company that develops and licenses software, cloud services, and hardware products. It provides operating systems, productivity applications, cloud computing, and enterprise technology solutions.

Evidence:

• • DNS Record TXT: MS=ms73859685 (root domain: owasp.org)

Description:

Microsoft Azure is Microsoft's comprehensive cloud computing platform that provides computing, storage, databases, networking, AI, and analytics services. It's one of the leading cloud providers, offering enterprise-grade cloud infrastructure and services for businesses worldwide.

Evidence:

• • Header Content-Security-Policy (default-src): https://owaspadmin.azurewebsites.net

Description:

Render is a cloud platform that provides hosting for web services, static sites, and databases. It offers automatic deployments from Git, SSL certificates, and managed infrastructure, making it simple for developers to deploy and scale applications.

Evidence:

• • Header Content-Security-Policy (img-src): https://render.com
• • Header Content-Security-Policy (img-src): https://*.render.com

Description:

Atlassian is a software company that provides collaboration and development tools for teams. Its products include Jira for project management, Confluence for documentation, Bitbucket for code collaboration, and Trello for task management, widely used by software development teams.

Evidence:

• • Subdomain support.owasp.org: CNAME: Reverse DNS: support-owasp-org-bf6e704e-1ced-447d-a571-58c5cce14ff5.saas.atlassian.com
• • DNS Record TXT: atlassian-domain-verification=BhaFKFKoRcW20xvi6UJ3U0CKocKOCgLH6LSuiBYPQ5A53cSCUN6gcbzcKSOmlVGs (root domain: owasp.org)

Description:

Coveralls is a code coverage tracking service that helps teams monitor test coverage over time. It integrates with CI systems and supports multiple languages and frameworks.

Evidence:

• • Header Content-Security-Policy (img-src): https://coveralls.io

Description:

GitHub is a web-based platform for version control and collaboration using Git. It provides code hosting, pull requests, issue tracking, and project management tools for software development teams. It's the world's largest code hosting platform, used by millions of developers and organizations.

Evidence:

• • Header Content-Security-Policy (default-src): https://api.github.com
• • Header Content-Security-Policy (default-src): https://*.githubusercontent.com
• • Header Content-Security-Policy (img-src): https://github.githubassets.com
• • Header Content-Security-Policy (img-src): https://*.githubusercontent.com
• • Header Content-Security-Policy (img-src): https://github.com
• ... and 1 more

Description:

License Buttons (Creative Commons) provides badge images and links for displaying content licenses. It is commonly used on documentation sites and open-source projects to indicate license type.

Evidence:

• • Header Content-Security-Policy (img-src): https://licensebuttons.net

Description:

Okteto is a cloud development platform that provides remote development environments and preview environments. It helps teams develop and test in production-like environments with minimal local setup.

Evidence:

• • Header Content-Security-Policy (img-src): https://okteto.com
• • Header Content-Security-Policy (img-src): https://*.okteto.com

Description:

Read the Docs is a documentation hosting platform that automatically builds, version controls, and hosts documentation from Git repositories. It provides free documentation hosting for open-source projects and paid plans for private documentation with Sphinx and MkDocs support.

Evidence:

• • Subdomain docs.owasp.org: CNAME: Reverse DNS: readthedocs.io

Description:

Shields.io is a service that provides customizable badges and status indicators for GitHub repositories and projects. It offers badges for build status, version numbers, downloads, and other project metrics that can be displayed in README files and documentation.

Evidence:

• • Header Content-Security-Policy (img-src): https://img.shields.io
• • Header Content-Security-Policy (img-src): https://img.shields.io

Description:

draw.io (diagrams.net) is a security-first diagramming tool for teams. It provides online and desktop diagram editors for flowcharts, UML, and technical diagrams, with integrations for Google Drive, Confluence, and other platforms.

Evidence:

• • Header Content-Security-Policy (script-src): https://viewer.diagrams.net
• • Header Content-Security-Policy (script-src): https://app.diagrams.net

Description:

Amazon SES (Simple Email Service) is a cloud-based email sending service from AWS that enables businesses to send transactional and marketing emails. It provides scalable email delivery, bounce and complaint handling, and email reputation management for applications and businesses.

Evidence:

• • DNS Record TXT (SPF): v=spf1 include:_spf.google.com include:servers.mcsv.net include:amazonses.com -all (root domain: owasp.org)

Description:

Mailchimp is an all-in-one marketing platform that provides email marketing, marketing automation, CRM, and analytics tools. It helps businesses create and send email campaigns, manage contacts, and track marketing performance across channels.

Evidence:

• • DNS Record TXT (SPF): v=spf1 include:_spf.google.com include:servers.mcsv.net include:amazonses.com -all (root domain: owasp.org)

Description:

Google Search Console (formerly Google Webmaster Tools) is a free service from Google that helps website owners monitor and maintain their site's presence in Google search results. It provides insights into search performance, indexing status, and technical SEO issues.

Evidence:

• • DNS Record TXT: google-site-verification=1zT9Of9pBuTj1rgeGCxMbya3iQQMxFE9-DzUBhftUVQ (root domain: owasp.org)
• • DNS Record TXT: google-site-verification=I9qx_X9EKlR_rfceG25-iXHBXJvLrmeNbkEdy182iI (root domain: owasp.org)
• • DNS Record TXT: google-site-verification=_slXlbOCopK1Ss9VQEoxdsNxpScVKvXVB_JtPpyL3eQ (root domain: owasp.org)
• • DNS Record TXT: google-site-verification=hJ9eCIFoexfh1sb-WVBkVB5PEND3JiaojOVyaNpyWK8 (root domain: owasp.org)
• • DNS Record TXT: google-site-verification=kmxuuCvLW4gII8YaV-3ilTOLUvjZa3uaipm0tmpVGpU (root domain: owasp.org)
• ... and 1 more

Description:

YouTube is the world's largest video-sharing platform, owned by Google. It allows users to upload, share, and view videos, serving as a platform for entertainment, education, marketing, and content creation. YouTube also provides APIs and embedding capabilities for businesses to integrate video into their websites.

Evidence:

• • Header Content-Security-Policy (default-src): https://www.youtube.com
• • Header Content-Security-Policy (frame-src): https://www.youtube.com
• • Header Content-Security-Policy (script-src): https://*.youtube.com