Stack census— back to the censusSurvey 016 · 07.10.2026

Password Managers · open source · awesome-selfhosted

Bitwarden

bitwarden.com · HTTP 200 in 3,123 ms

13 things were found in the response on 07.10.2026. This is the front door only: whatever runs behind a login, and anything a browser would have to execute to reveal, is not here.

What the page is built with

Inertia.jsjavascript frameworks
  • header — vary: Accept-Encoding, X-Inertia
Tailwind CSSui frameworks
  • css — stylesheet matches --tw-(?:rotate|translate|space-x|text-opacity|border-opacit…

Where it is served from

Amazon S3cdn
  • header — content-security-policy: default-src 'self';base-uri 'self';child-src blob:;connect-src 'self' wss: https: https:/…
Amazon Web Servicespaas
  • implied — implied by Amazon S3

Where their email goes

Google Workspacewebmail · email
  • dns — MX 5 alt1.aspmx.l.google.com
  • dns — MX 5 alt2.aspmx.l.google.com

What is watching the visitor

Ahrefsseo · analytics
  • meta — <meta ahrefs-site-verification="61c991678758d4a41d5f82f492d40058699607a047824fe2b80c1634b5d…">
Google Tag Managertag managers
  • html — googletagmanager.com/ns.html?id=GTM-NF32QCS" height="0" width="0" style="display:none;vis…
Linkedin Adsadvertising
  • header — content-security-policy: default-src 'self';base-uri 'self';child-src blob:;connect-src 'self' wss: https: https:/…
Linkedin Insight Taganalytics
  • header — content-security-policy: default-src 'self';base-uri 'self';child-src blob:;connect-src 'self' wss: https: https:/…

Where the words and pictures live

Algoliasearch engines
  • header — content-security-policy: default-src 'self';base-uri 'self';child-src blob:;connect-src 'self' wss: https: https:/…
Swagger UIdocumentation
  • css — stylesheet matches swagger-ui

What stands at the door

HSTSsecurity
  • header — strict-transport-security: max-age=31557600
Ketchcookie compliance
  • script — https://global.ketchcdn.com/web/v3/config/bitwarden/website_smart_tag/static.js

Back to the census.