HTTP Headers Analysis for https://admin.alkermes.com

Detected Technologies from Headers

See all in URL Inspect 2

ASP.NET

Microsoft IIS

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Basic

default-src Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

private, no-store

cache-control: private, no-store

Content Headers

Content-Length

Content

15004

Content-Type

Content

text/html; charset=utf-8

content-length: 15004
content-type: text/html; charset=utf-8

Server Headers

Server

Microsoft-IIS/10.0

X-Aspnet-Version

Server

4.0.30319

server: Microsoft-IIS/10.0
x-aspnet-version: 4.0.30319

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: CMSCsrfCookie=EoMYyNxQSGB3IVovWGL9PKG8yEKvC2k0oBAuQ4kH; path=/; HttpOnly; SameSite=Lax
ASP.NET_SessionId=ex5s0cupeo0oa24qkzhatbpg; path=/; secure; HttpOnly; SameSite=Lax

Other Headers

Date

Other

Mon, 23 Feb 2026 14:03:14 GMT

X-Ua-Compatible

Other

IE=Edge

date: Mon, 23 Feb 2026 14:03:14 GMT
x-ua-compatible: IE=Edge

Recommendations

Enable compression (gzip/brotli) to improve performance