Skip to main content

Is smartrecruiters.com a Scam? Security Check Results - SmartRecruiters, Inc. Reviews

smartrecruiters.com favicon

Is smartrecruiters.com Safe? Security Analysis for SmartRecruiters, Inc.

Check if smartrecruiters.com is a scam or legitimate. Free security scan and reviews.

TechnologyUnited Statesenterprise
Bootstrap 4.6.2jQuery 3.6.0CrazyEggGoogle Tag ManagerMarketo Munchkin+6 more
Analyzed 9/5/2025Completed 10:30:23 PM
78
Security Score
LOW RISK

AI Summary

SmartRecruiters, Inc. operates a leading enterprise-grade talent acquisition and recruiting platform that leverages AI to streamline hiring processes for a broad range of customers including corporate and high-volume hiring needs. The company is recognized as a Gartner Magic Quadrant Leader for 2025 and is in the process of acquisition by SAP, indicating strong market positioning and growth. Their platform offers comprehensive services from job posting to onboarding, enhanced by AI-powered tools such as candidate screening and talent matching. The website reflects a mature digital presence with modern technologies, good SEO, and accessibility features. Security posture is solid with HTTPS, privacy policies, and consent management, though explicit security headers and incident response contacts could be improved. The absence of WHOIS data is notable but does not detract significantly from the overall trustworthiness given the company's visible market presence and trust signals. Overall, the site and business demonstrate a high level of professionalism and reliability.

Detected Technologies

Bootstrap 4.6.2jQuery 3.6.0CrazyEggGoogle Tag ManagerMarketo MunchkinWistia video embedTypekit fontsLottie animationsPingdom RUMQualified chatConsentManager CMP

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

SmartRecruiters targets HR professionals, recruiters, and enterprises seeking efficient and AI-enhanced hiring solutions. Their SaaS business model is supported by a broad partner ecosystem and integrations with popular HCM systems. The company benefits from strong brand recognition, a large customer base including global industry leaders, and strategic partnerships. Their marketing and analytics infrastructure is robust, employing multiple tracking and engagement tools. The announced acquisition by SAP suggests significant financial backing and potential for expanded market reach. The company maintains a comprehensive resource library and customer support channels, reinforcing customer engagement and retention.

Extracted Contact Information

Marketing Intelligence Data

Phone Numbers (1)

+1415659****

Security Posture Analysis

Comprehensive Security Assessment

The website enforces HTTPS and employs a consent management platform to comply with privacy regulations. Privacy and cookie policies are comprehensive and GDPR compliant. Security best practices are observed, including the use of reputable third-party scripts and no visible exposure of sensitive data. However, explicit security headers such as Content-Security-Policy and Referrer-Policy are not clearly present in the HTML source. There is no public vulnerability disclosure or incident response contact information, which could be enhanced to improve transparency and readiness. DNSSEC status is unknown due to missing WHOIS data. Overall, the security posture is strong but could benefit from additional explicit security controls and disclosures.

Strategic Recommendations

Priority Actions for Security Improvement

1

Explicitly implement and verify security headers such as Content-Security-Policy, Referrer-Policy, and X-Content-Type-Options.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

SmartRecruiters, Inc.

Description:

Enterprise-grade recruiting platform designed for HR and recruiting talent. SmartRecruiters all-in-one solution, so you can track applicants and hire easily.

Key Services:
Applicant Tracking SystemAI-powered candidate screeningInterview schedulingOffer managementOnboardingAI Talent MatchingIntegrations with HCM and third-party apps
Content Quality:

excellent

Branding:

consistent

Technical Stack

Technologies:
Bootstrap 4.6.2jQuery 3.6.0CrazyEggGoogle Tag ManagerMarketo MunchkinWistia video embedTypekit fontsLottie animationsPingdom RUMQualified chatConsentManager CMP
Frameworks:
WordPress CMS
Platforms:
WordPress
Performance:

moderate

Mobile:

good

Accessibility:

good

SEO:

good

Security Assessment

Security Score:
85/100
Best Practices:
  • HTTPS enforced
  • Consent management platform for cookies
  • Privacy policy and terms of service available
  • No exposed sensitive data in HTML
  • Use of reputable third-party scripts

Analytics & Tracking

Services:
Google Tag ManagerAhrefs AnalyticsCrazyEgg
Tracking Level:moderate
Privacy Compliance:good

Advertising & Marketing

Ad Networks:
Google Ads (AW-1049288542)CrazyEgg
Tracking Pixels:
CrazyEggMarketo MunchkinQualified chatAhrefs Analytics
Marketing Tools:
MarketoCrazyEggQualifiedAhrefs
Transparency Level:good

Website Quality Assessment

Design Quality:excellent
User Experience:excellent
Content Relevance:excellent
Navigation Clarity:excellent
Professionalism:excellent
Trustworthiness:high

Key Observations

1

Website is fully accessible and not blocked by WAF or security challenges.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

70/100
Score

Missing X-Content-Type-Options header

MEDIUM

Prevents MIME type sniffing

Missing Referrer-Policy header

LOW

Controls referrer information sent with requests

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

Sensitive data may be cached

LOW

Cache-Control header should include "no-store" for sensitive pages

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

85/100
Score

No Cookie Consent Banner found

HIGH

GDPR requires explicit consent for non-essential cookies

GDPR Compliance Analysis

Privacy Policy85% confidence
Cookie Policy85% confidence
Contact Information Found90% confidence
phone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

17/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

85/100
Score

No BIMI Record

LOW

BIMI displays brand logos in email clients

No MTA-STS Policy

MEDIUM

MTA-STS enforces TLS for email delivery

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security
SPF Details
Record:
v=spf1 mx include:_spf.google.com include:sendgrid.net exists:%{i}._spf.mta.salesforce.com include:mktomail.com ip4:199.15.212.1 ip4:199.15.215.254 include:_spf.eu.mailgun.org -all
DNS Lookups:6/10
Policy:-all
DKIM Selectors Found
Selector:google(1296-bit rsa)
Selector:k2(1416-bit rsa)
Selector:selector1(1296-bit rsa)
Selector:s1(1440-bit rsa)
DMARC Details
Policy:reject
Aggregate Reports:dmarc@dmarc.smartrecruiters.com
Forensic Reports:dmarc@dmarc.smartrecruiters.com

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

90/100
Score

Mixed Content Detected

MEDIUM

1 resources loaded over insecure HTTP

Partial SSL/TLS Assessment

LOW

Completed 2 of 4 security checks due to time constraints

Certificate Details

Subject:*.smartrecruiters.com
Issuer:Sectigo Public Server Authentication CA DV R36
Valid Until:6/2/2026 (270 days)
SANs:*.smartrecruiters.com, smartrecruiters.com

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

90/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

Domain Registration Details

Domain Age
19 years(mature)
Expiry Risk
none(795 days)
Protection Level
strongDNSSEC OFF

DNS Records

A Records:18.185.186.86, 35.156.11.6
Name Servers:
ns-1508.awsdns-60.org
ns-1909.awsdns-46.co.uk
ns-216.awsdns-27.com
ns-770.awsdns-32.net
MX Records:
1: aspmx.l.google.com
5: alt1.aspmx.l.google.com
5: alt2.aspmx.l.google.com
10: alt3.aspmx.l.google.com
10: alt4.aspmx.l.google.com
SOA:Serial: 2, TTL: 86400s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:63ms

SPF Analysis

SPF Record:
v=spf1 mx include:_spf.google.com include:sendgrid.net exists:%{i}._spf.mta.salesforce.com include:mktomail.com ip4:199.15.212.1 ip4:199.15.215.254 include:_spf.eu.mailgun.org -all

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

100/100
Score

Good Network Security Posture

LOW

No unnecessary services detected on common risky ports

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website is built on WordPress CMS with a modern front-end stack including Bootstrap 4.6.2 and jQuery 3.6.0. It integrates multiple third-party services such as Marketo for marketing automation, CrazyEgg for heatmaps, Google Tag Manager for analytics, and Wistia for video hosting. The site uses Typekit fonts and Lottie animations for enhanced user experience. Performance is moderate with asynchronous loading of scripts and lazy loading of images. Mobile optimization and accessibility features are good, supported by an accessibility system (EqualWeb). SEO is well implemented with comprehensive meta tags, Open Graph, and JSON-LD structured data. Hosting provider details are not explicitly found. Overall, the technical infrastructure is modern and well-maintained with opportunities for performance tuning and enhanced security header implementation.
Analyze Another Website