HTTP Headers Analysis for https://api.premiums.prudential.ug

Detected Technologies from Headers

See all in URL Inspect 2

Gunicorn

Imperva

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31536000

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Present

same-origin

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Add Content-Security-Policy header to prevent XSS attacks
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Vary

Performance

Accept,Origin,Cookie

connection: close
vary: Accept,Origin,Cookie

Caching Headers

No caching headers found

Content Headers

Content-Length

Content

58

Content-Type

Content

application/json

content-length: 58
content-type: application/json

Server Headers

Server

gunicorn

server: gunicorn

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: q4dm9s-api-premiums-prudential-ugCORS=febdfa545fdc7c605767373991a1a4f7; Path=/; SameSite=None; Secure
q4dm9s-api-premiums-prudential-ug=febdfa545fdc7c605767373991a1a4f7; Path=/
visid_incap_2831180=0EoE47KyTHuIGP2rZ8Vv1R0Dn2oAAAAAQUIPAAAAAADMQfGiwq4SKDm6Qcz/wGOs; expires=Tue, 07 Sep 2027 06:51:28 GMT; HttpOnly; path=/; Domain=.premiums.prudential.ug; Secure; SameSite=None
nlbi_2831180=tRZZaxj/gC9Q3uBIbqtHcQAAAAAX1xDNFFOMjzIZqKWr1UyJ; HttpOnly; path=/; Domain=.premiums.prudential.ug; Secure; SameSite=None
incap_ses_1021_2831180=xzpyDzJHBHQ4f608HlIrDh8Dn2oAAAAASGRyX6LJYTel3wpx+JgskQ==; path=/; Domain=.premiums.prudential.ug; Secure; SameSite=None

Other Headers

Allow

Other

OPTIONS, GET

Date

Other

Mon, 07 Sep 2026 18:31:59 GMT

Via

Other

1.1 api.premiums.prudential.ug (Apache/2.4.37)

Www-Authenticate

Other

Bearer realm="api"

X-Cdn

Other

Imperva

X-Iinfo

Other

31-8542388-8542439 NNNN CT(217 432 0) RT(1788805917515 257) q(0 0 7 4) r(14 14) U11

allow: OPTIONS, GET
date: Mon, 07 Sep 2026 18:31:59 GMT
via: 1.1 api.premiums.prudential.ug (Apache/2.4.37)
www-authenticate: Bearer realm="api"
x-cdn: Imperva
x-iinfo: 31-8542388-8542439 NNNN CT(217 432 0) RT(1788805917515 257) q(0 0 7 4) r(14 14) U11

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching