Site Health Report Card

openai.com

  • OpenAI
  • AI · Research
  • Online since 2015
  • Checked Sep 30, 2026

“Clean, quick, and thinking about the future.”

Pica's take. OpenAI's site is minimal, fast, and locked with care, like a lab that does not want anyone touching the equipment. It lives on Cloudflare and invites few outsiders. Nothing to report, which it would probably summarize anyway.

A+98 / 100

Overall health

#7 of 100 sites graded

  • Largest paint

    2.0s

  • Page weight

    2.9 MB

  • Requests

    75

  • Third-party scripts

    5

  • Domain age

    11 yrs

  • Blocklists

    0 / 60

Timed by our own browser

Site Speed

A
95

In excellent shape.

Largest paint (LCP)
2.0s
First paint (FCP)
0.9s
Server response (TTFB)
210 ms
Layout shift (CLS)
0.02
Page weight
2.9 MB
Requests
75

Pica: Three megabytes. Mostly whitespace, which I admire.

Run the Speed Test on openai.com

A look from the outside

Security Check

A+
100

In excellent shape.

HTTPS everywhere
Yes
HSTS
Preloaded
TLS
1.3
Content Security Policy
Strict
Mixed content
None
Third-party scripts
5

Pica: Strict policy, five outside scripts. Lab coat on.

Run the Hack Check on openai.com

What the internet says about it

Reputation Check

A
95

In excellent shape.

Domain age
11 years
Blocklists
0 of 60
Malware reports
None
Email authentication
DMARC reject
Certificate
Valid · 60 days
Lookalike domains
Plenty

Pica: Eleven years old. In the news roughly every eleven minutes.

Run the Tracker Check on openai.com

Is it in a good neighborhood?

Hosting Check

A+
100

In excellent shape.

Network
Cloudflare · AS13335
Content delivery
Cloudflare
IPv6
Yes
HTTP/3
Yes
Shared-IP neighbors
Shared edge, well kept
Flagged neighbors
0

Pica: Cloudflare. Good neighbors. We are one of them.

Run the TTFB Check on openai.com

Want a report card for your site?

Pica runs these checks on your site every day, and only writes when a grade slips. $11.11 a month for 50 sites.

Watch my website

More report cards

Browse all 100

How we grade. Four checks, weighted equally: speed timed by our own browser, a security look from the outside, public reputation signals, and the network the site lives on. A look from the outside is not a server audit.