discourse.org

Discourse | One platform. Any community.

Discourse is the customizable, scalable community platform powering more than 22,000 communities that create knowledge through conversation.

Built with

Frontend framework

Jekyll

Generator tag

Jekyll v4.4.1

Also detected

Infrastructure

Amazon CloudFront · Amazon S3

Third-party services

Google Tag Manager

Overview

Status

alive

Registered

2001-12-10 (25 years ago)

First seen here

2026-09-22

Security grade

D (65/100, from headers & TLS)

Privacy score

78/100 (2 third-party script hosts, 1 tracking/marketing services)

Hosting

Amazon.com, Inc. · AS16509 · France

Server header

AmazonS3

Response time

33 ms to first byte, measured from our crawler

TLS certificate

Amazon · TLSv1.3 · expires 2026-11-21

Language

en

Mobile-ready

yes (viewport meta tag)

Structured data

Organization · WebSite

Linked to from

9 other sites seen so far

Loads scripts from

Third-party domains this page pulls JavaScript or iframes from. Each one can see who visits.

What to fix

1. Add a Content-Security-Policy
   Limits which scripts can run, and is the main defense against XSS. Start with Content-Security-Policy-Report-Only to test.
2. Add X-Content-Type-Options
   Header: X-Content-Type-Options: nosniff
3. Add a Referrer-Policy
   Header: Referrer-Policy: strict-origin-when-cross-origin

Security & email signals

• ✓ HTTPS
• ✓ HSTS
• ✗ Content-Security-Policy
• ✗ X-Content-Type-Options
• ✓ X-Frame-Options
• ✗ Referrer-Policy
• ✗ Permissions-Policy
• ✓ SPF record
• ✓ DMARC record
• ✗ DKIM record
• ✓ Cookies set securely
• ✓ Has real content (not an empty shell)
• ✓ Valid TLS certificate

Badge

Show this site's security grade in a README or footer:

<a href="https://webtelemetry.dev/site/discourse.org"><img src="https://webtelemetry.dev/badge/discourse.org.svg" alt="Security grade"></a>

Generated automatically from passive, publicly observable data. Think something here is wrong or want this profile removed? See /bot. Machine-readable: JSON.