runsonwhat

Candor's tech stack

What does Candor use?

Candor (candor.security) uses at least 10 tools we can see from public records, including Vercel for hosting, Google Workspace for email and documents, Calendly for sales and Cloudflare for content delivery. Last checked .

“Protect your data and stop insider risk”

Industry
Security
Size
1–10 employees
Based in
San Francisco, United States
Founded
2024
LinkedIn
Company page
Tools found
10
Categories
9
Layers
4 of 5
Last checked
Oct 2026

Candor's stack, layer by layer

Each tool links to the other companies we've found using it. The label says what kind of public trace gave it away.

Edge & Hosting

2 tools, where the bytes are served from

Hosting & Cloud

CDN & Edge

Application

4 tools, what the product is built with

Go-to-market

2 tools, how they find and keep customers

Company Ops

2 tools, what the team runs on day to day

Security & Compliance

Candor tech stack FAQ

What tools does Candor use?

We've found 10 tools at Candor (candor.security). Edge & Hosting: Cloudflare and Vercel. Application: Google Fonts, GSAP and Astro. Go-to-market: Calendly. Company Ops: Google Workspace and SafeBase. Last checked October 2, 2026.

What cloud does Candor run on?

Candor uses Vercel for hosting. We found Vercel through DNS verification records and website code.

What CRM does Candor use?

Candor uses Calendly for sales and CRM. We found Calendly through website code.

What email provider does Candor use?

Candor uses Google Workspace for email and documents. We found Google Workspace through email records.

Does Candor use Cloudflare?

Yes. We found Cloudflare at Candor through DNS records and website code. Cloudflare is used by 186,418 companies we track.

How does runsonwhat know what Candor uses?

We read public traces only: Candor's DNS and email records, certificate logs, the code its website loads, and published subprocessor lists. A tool is listed only when a direct record backs it up. DNS is rechecked weekly and the website monthly.

We read public traces only: DNS and email records, certificate logs, website code and published subprocessor lists. A tool is listed when a direct record backs it up, and dropped when a recheck no longer finds it. Is this your company? See how to opt out.