whereby.com
Paid content
Categories: Video & Film
Host quick instant meetings or embed video calls into your platform with Whereby’s video conferencing API and SDK.
Related questions
More questions →What to Look for in a Video Platform Beyond Hosting and Sharing
If you're evaluating a video platform for a small business or marketing team, hosting and sharing are just the entry point. The features that actually determine whether a platform fits your workflow fall into four areas: privacy and playback control, collaboration and review tools, marketing and analytics capabilities, and practical limits like storage and mobile support. Most general-purpose tools (cloud storage, social networks, free hosts) cover hosting well but leave gaps in the other three. This guide walks through what each area means in practice, so you can map features to your own situation instead of comparing endless checklists.
Start by separating three jobs: hosting, editing, and marketing
Video platforms tend to bundle three distinct functions, and confusion usually comes from mixing them up:
- Hosting — storing a file, generating a player, delivering it reliably to viewers. This is the baseline.
- Editing — trimming, assembling, adding captions or branding. Some platforms include basic editors; others expect you to edit elsewhere and upload the result.
- Marketing and business features — privacy controls, lead capture, calls to action, analytics, team review workflows. These are what separate a "video host" from a "video platform."
A useful exercise: write down your last five video tasks (a product demo, a client pitch, a social clip, an internal training, a landing page embed). For each one, note which of the three jobs it required. If most of your tasks stop at hosting, a lighter tool may be enough. If several involve review cycles, gated access, or measuring viewer behavior, a fuller platform earns its cost.
Privacy and playback control: the business-vs-social divide
On social platforms, everything is public by default and wrapped in ads and recommendations. For business use, that's often the opposite of what you want. Look for:
- Granular privacy settings — can you restrict a video to specific people, a password, a domain, or an embed location? Can you make it unlisted but still embeddable?
- Ad-free playback — your product demo shouldn't end with a competitor's ad or an unrelated recommendation.
- Customizable embeds — control over player color, logo, and whether related videos appear. This matters when the video sits on your own site and represents your brand.
- Domain-level restrictions — the ability to limit playback to your own website prevents your content from being re-embedded elsewhere.
If your videos are purely promotional and public, these controls matter less. If you share client work, internal training, or pre-release material, they become the deciding factor.
Collaboration and review: the most common gap
This is where general-purpose tools most often fall short. A shared drive lets people comment on a file, but it doesn't give you a structured review process. A dedicated platform typically offers:
- Timestamped comments — feedback attached to a specific moment in the video, so "the logo looks off" points to an exact frame.
- Versioning — uploading a new cut while keeping the old one, so reviewers can see what changed.
- Approval status — a clear "approved" or "needs changes" state rather than a scattered email thread.
- Role-based access — reviewers who can comment but not download or reshare.
When this becomes relevant: as soon as more than two people need to sign off on a video, or when you're producing videos on a recurring schedule. For a solo operator publishing once a month, a simple comment thread may be sufficient.
Analytics and lead capture: beyond view counts
A raw view count tells you almost nothing actionable. Business-oriented platforms go further:
| Feature | What it tells you | When it matters |
|---|---|---|
| Watch time / engagement graph | Where viewers drop off | Improving content or editing |
| Viewer identity | Who watched (when gated) | Sales follow-up, internal training |
| Lead capture forms | Email collected before or during playback | Demand generation |
| Calls to action | Click-through to a page or booking link | Converting viewers |
| Embed/domain reports | Where your video is being watched | Tracking campaign performance |
If your goal is brand awareness, basic view counts may be fine. If you're using video to generate leads or train staff, the deeper metrics are the reason to choose a platform over a free host.
Practical limits that affect daily use
Feature lists rarely mention the constraints that cause friction later. Check these before committing:
- Storage and bandwidth limits — how much you can upload, and whether high viewership triggers overage fees.
- Upload size and length caps — relevant if you work with long recordings or high-resolution footage.
- Mobile app support — can you upload, review, and respond to comments from a phone? For teams that shoot on mobile, this is a real workflow factor.
- Export and portability — can you download your originals and embed codes if you leave? Lock-in is a hidden cost.
- Integrations — does it connect to the tools you already use (your website builder, CRM, or project tracker)?
Deciding between a full platform and a lighter tool
Use these rough conditions as a starting point:
A lighter tool (free host, cloud storage, social platform) is likely enough if:
- You publish occasionally and mostly to public channels.
- One person handles video end to end.
- You don't need gated access or viewer-level analytics.
A dedicated platform is worth evaluating if:
- Multiple people review or approve videos.
- You need privacy controls, ad-free playback, or branded embeds.
- You're using video for lead generation, training, or client delivery.
- You publish frequently enough that manual workarounds cost more than a subscription.
Pricing and plan details change often, so check the platform's current plans page directly rather than relying on secondhand comparisons. The right approach is to list your actual requirements first, then match them against what each option offers — not the other way around.
What Is OpenAPI-Generated API Documentation and How Does It Work?
OpenAPI-generated API documentation is reference documentation that is produced automatically from an OpenAPI description file rather than written by hand. You write (or generate) a machine-readable specification of your API — endpoints, parameters, request bodies, responses, schemas, and auth — and a documentation tool reads that file and renders a browsable, often interactive reference site. The spec becomes the single source of truth; the docs become a build artifact.
This differs from manually written docs in one fundamental way: with hand-written docs, the prose is the source of truth and the API is described separately. With spec-driven docs, the API description is the source, and every page, table, and code sample is derived from it.
How the workflow actually runs
A typical spec-driven documentation pipeline has five stages:
- Author or generate the spec. You either write an OpenAPI document by hand (YAML or JSON), or generate it from code annotations, framework metadata, or a design-first editor. Design-first means the spec is written before implementation; code-first means it is extracted from existing code.
- Validate and lint. The spec is checked against the OpenAPI schema and against style rules — consistent naming, required descriptions, no undocumented
4xxresponses, no orphaned schemas. - Bundle and transform. Multi-file specs are combined,
$refpointers are resolved, and the document is optionally split into per-tag or per-version outputs. - Render. A documentation tool converts the spec into HTML: an endpoint list, a sidebar of operations, parameter tables, response schemas, and a "try it" console.
- Publish and version. The rendered site is deployed, and each API version gets its own snapshot so consumers can read docs matching the version they call.
Steps 2 through 5 are usually automated in CI. If the spec fails validation, the docs build fails — which is the point.
Spec-driven vs. hand-written documentation
| Dimension | OpenAPI-generated | Hand-written |
|---|---|---|
| Source of truth | The spec file | The prose |
| Consistency with the API | High, if the spec is accurate | Drifts as the API changes |
| Effort per endpoint | Low after setup | Repeated for every endpoint |
| Narrative and tutorials | Weak; needs separate pages | Strong |
| Code samples | Generated per language from schemas | Written and maintained manually |
| Customization | Bounded by the tool's templates | Unlimited |
| Failure mode | Accurate spec, poor docs, or stale spec | Beautiful docs that describe an API that no longer exists |
The practical conclusion most teams reach: generate the reference, write the guides. Reference material is repetitive and mechanical, which is exactly what generation is good at. Conceptual explanations, migration notes, and tutorials carry judgment that a spec cannot express.
What you get out of the box
Generated reference pages commonly include:
- An operation list grouped by tag or path, with HTTP method and path.
- Parameter tables showing name, location (path, query, header, cookie), type, required flag, and description.
- Request and response schemas rendered as expandable trees, including nested objects and arrays.
- Authentication details pulled from the
securitySchemessection. - Interactive request consoles that let a reader send a real call from the browser.
- Generated code samples in several languages, derived from the same schemas.
- Multiple output formats, such as a static site, a single HTML file, or a mock server.
Because all of these come from one document, changing a field name in the spec updates the parameter table, the schema tree, and every code sample at once.
Where spec-driven documentation breaks down
Generation is not free. The trade-offs are real:
Spec quality becomes documentation quality. A field with no description produces a table row with an empty cell. A vague summary produces a vague heading. Tools can enforce presence of descriptions via linting, but they cannot enforce that the description is useful.
Customization has limits. If you need a page that does not map to an OpenAPI concept — a conceptual overview, a pricing explanation, a comparison of two endpoints — you write it outside the generator and link to it.
Not everything is expressible. Webhooks, streaming responses, long-polling behavior, and complex multi-step flows are awkward or impossible to describe fully in OpenAPI. Those need prose.
The spec can go stale. If the spec is maintained separately from the implementation, it drifts just like hand-written docs. The mitigation is to generate the spec from code, or to test the implementation against the spec in CI.
Interactive consoles need care. A "try it" button that hits a production API with real credentials is a security and rate-limit problem. Point it at a sandbox, or disable it.
Deciding whether to adopt it
Adopt spec-driven reference documentation if most of these are true:
- Your API has more than a handful of endpoints, or changes frequently.
- You ship client SDKs or code samples in more than one language.
- Multiple teams consume the API and need a consistent, always-current reference.
- You already have, or are willing to maintain, an OpenAPI description.
Stay with hand-written docs, or a hybrid, if:
- Your API is small and stable, and the reference fits on one page.
- Your documentation is mostly conceptual and contains little endpoint-level detail.
- You cannot commit to keeping the spec in sync with the implementation.
A reasonable middle path: generate the reference from the spec, and hand-write the getting-started guide, authentication walkthrough, and error-handling page. Link the two directions so readers can move from concept to endpoint and back.
A minimal starting checklist
- Produce one valid OpenAPI document for a single API version.
- Add a linter with rules for descriptions, operation IDs, and error responses.
- Wire the docs build into CI so a failing spec fails the build.
- Render the reference and review it as a reader, not as the author.
- Write the two or three conceptual pages the generator cannot produce.
- Version the published docs alongside the API version.
The core idea is simple: describe the API once, in a format both machines and humans can read, and let the reference documentation fall out of that description. Everything else — tooling, hosting, interactivity — is a detail on top of that decision.
Website Overview
An established domain and managed infrastructure suggest continuity of operations and may support dependable delivery, although neither guarantees service quality. Page metadata, canonical configuration and social previews work together to provide more consistent search and sharing presentation.
Domain and Registration
Registered in 2000, this domain has about 25 years of history. That suggests continuity, although ownership and purpose may have changed. Transfer-protection status is present, helping reduce the risk of unauthorized domain transfers. The domain uses the common .com extension, which is not an independent safety signal.
DNS and Email
Nameservers are provided by Amazon Route 53, indicating managed DNS hosting. MX records point to the Google Workspace email service. CAA records restrict which certificate authorities are authorized to issue certificates. No CNAME was found; the observed records resolve directly to addresses. SPF and DMARC are configured. DKIM status is unknown.
TLS and Certificates
The certificate uses an RSA 2048-bit public key, offering broad client compatibility. The server supplied a complete certificate chain. No organization name is present in the certificate; the available fields are consistent with domain validation. The certificate was issued within the Amazon cloud or CDN ecosystem. The certificate is valid for about 197 days in total, with 70 days remaining.
HTTP and Browser Security
The response lacks these common security headers: CSP, Referrer-Policy, Permissions-Policy, clickjacking protection. CORS permits any origin to read this response. This is common for public resources; sensitive responses need narrower handling. No X-Powered-By header was found, reducing one common source of backend fingerprinting information. No obvious internal addresses or debug information were found in the headers. The Server header contains the custom value Framer/26fa766.
Technology Stack Analysis
The public page identifies Framer 99770fa, Google Tag Manager without precise versions, leaving fewer clues for version-specific scanning.
Search and Social Sharing
The Generator tag identifies Framer 99770fa, making the publishing system easier to fingerprint. Twitter Card metadata is configured. The title has 59 characters, within a common display range. A meta description is present, with 114 characters. A viewport declaration is present, providing a basis for mobile layout.
Hosting and Email
Pages, Search and Sharing
| Meta description | Host quick instant meetings or embed video calls into your platform with Whereby’s video conferencing API and SDK. |
|---|---|
| Canonical URL | https://whereby.com/ |
| Language | English (default) |
| Twitter Card | summary_large_image |
Social Sharing Preview
9 fieldsrobots.txt (opens in a new tab)
6 rulesAll bots 1 allowed · 5 disallowed
/org/signup/embedded/information/ios//libraries/geoip2.js/org//user//information/lp*
No matching rules.
Sitemaps
1
Registration details RDAP / WHOIS
| Registrar | Amazon Registrar, Inc. |
|---|---|
| Registered | 2000-12-31 |
| Expires | 2026-12-31 |
| Domain status | client transfer prohibited |
| Nameservers | ns-1411.awsdns-48.org、ns-1933.awsdns-49.co.uk、ns-42.awsdns-05.com、ns-525.awsdns-01.net |
| DNSSEC | unsigned |
DNS records
| Type | Name | Value | TTL | Priority |
|---|---|---|---|---|
| A | whereby.com | 75.2.8.149 | 2860 | — |
| A | whereby.com | 99.83.164.242 | 2860 | — |
| MX | whereby.com | aspmx.l.google.com | 300 | 1 |
| MX | whereby.com | alt1.aspmx.l.google.com | 300 | 5 |
| MX | whereby.com | alt2.aspmx.l.google.com | 300 | 5 |
| MX | whereby.com | aspmx2.googlemail.com | 300 | 10 |
| MX | whereby.com | aspmx3.googlemail.com | 300 | 10 |
| NS | whereby.com | ns-1411.awsdns-48.org | 172800 | — |
| NS | whereby.com | ns-1933.awsdns-49.co.uk | 172800 | — |
| NS | whereby.com | ns-42.awsdns-05.com | 172800 | — |
| NS | whereby.com | ns-525.awsdns-01.net | 172800 | — |
| TXT | whereby.com | MS=D32918AEB0FA46EADA07F5085EF914F2BD8F3051 | 300 | — |
| TXT | whereby.com | MS=DF46EF9D6DBD799E35AF363814C53C172EA13738 | 300 | — |
| TXT | whereby.com | MS=ms80206605 | 300 | — |
| TXT | whereby.com | facebook-domain-verification=7mjqtw0xv3cgiuxlovxejglfw21pl1 | 300 | — |
| TXT | whereby.com | google-site-verification=Ay2DNrysX75D9EyuQBkJ1RbvI_vOaoWQIjGggOAf9gE | 300 | — |
| TXT | whereby.com | google-site-verification=FgLpC5f2DaqW6UQajQeSQMyAphO9pQL6zrx85hVa9-c | 300 | — |
| TXT | whereby.com | google-site-verification=MEWdQXmZQTdGoBPdaNRaV7VEp4gpJvD8mjWG9YKZ6eI | 300 | — |
| TXT | whereby.com | google-site-verification=NJHzNZLgVZuji3aa73CxbqGTvU0lSVsHq6MgF8qCj9Y | 300 | — |
| TXT | whereby.com | google-site-verification=WXyjmpioMYmbSFHm1CozZQOU_yK-GZs53sOyAjOWuI4 | 300 | — |
| TXT | whereby.com | google-site-verification=eCOlB9Di0yLohh3f02o4iackKf40YFA-eQtl9p0K6V4 | 300 | — |
| TXT | whereby.com | google-site-verification=frda-eSCjc8yoczZJHlCCzdR_RwfFWKKPaiSwocPzYI | 300 | — |
| TXT | whereby.com | google-site-verification=zeeDr-Jy21Q2ZJByicN9yG-0maPIbnoPW1Z9gEZAHEc | 300 | — |
| TXT | whereby.com | v=spf1 include:_spf.google.com include:amazonses.com include:helpscoutemail.com include:_spf.salesforce.com ~all | 300 | — |
| CAA | whereby.com | 0 iodef "mailto:[email protected]" | 300 | — |
| CAA | whereby.com | 0 issue "amazon.com" | 300 | — |
| CAA | whereby.com | 0 issue "amazonaws.com" | 300 | — |
| CAA | whereby.com | 0 issue "amazontrust.com" | 300 | — |
| CAA | whereby.com | 0 issue "awstrust.com" | 300 | — |
| CAA | whereby.com | 0 issue "certainly.com" | 300 | — |
| CAA | whereby.com | 0 issue "letsencrypt.org" | 300 | — |
| DMARC | _dmarc.whereby.com | v=DMARC1;p=reject;sp=reject;pct=100;rua=mailto:[email protected],mailto:[email protected] | 300 | — |
TLS and certificates
| Assessment | Normal configuration |
|---|---|
| Supported protocols | TLSv1.2 |
| Negotiated protocol | TLSv1.2 |
| Certificate subject | whereby.com |
| Issuer | Amazon |
| Valid until | 2026-12-04T23:59 · Remaining when checked: 70 days |
| Verification details | Certificate trust: Passed · Hostname match: Passed |
HTTP response headers
| Header | Value |
|---|---|
| content-type | text/html |
| server | Framer/26fa766 |
| strict-transport-security | max-age=31536000 |
| x-content-type-options | nosniff |
| access-control-allow-origin | * |
Identified technologies
Recent Updates
- Website images
- Screenshots
- Network details
- Website Technologies
- Pages and Search Information
- HTTP Response Information
- TLS and certificates
- DNS Information
- Domain Registration
- Website profile
- Website Description
- Website Name
- Website profile
- Website Description
- Website Name
User reviews (0)