HTTP Headers Analysis for https://app.contentstack.com

Detected Technologies from Headers

See all in URL Inspect 17

AWS

BootstrapCDN

Cloudflare CDNJS

Command AI

Contentstack

Datadog

Google Analytics

Google Fonts

Google Tag Manager

Heap

Intercom

jQuery

Pusher

Salesforce Cloud

Salesforce Sites

unpkg

UserSnap

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Basic

default-src; img-src; script-src; +9 more Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Accept-Ranges

Performance

bytes

Connection

Performance

close

Vary

Performance

Accept-Encoding

accept-ranges: bytes
connection: close
vary: Accept-Encoding

Caching Headers

Age

Caching

0

Etag

Caching

"db2d1453ed72177871f5b856d04c8b64"

Last-Modified

Caching

Thu, 30 Apr 2026 07:18:30 GMT

age: 0
etag: "db2d1453ed72177871f5b856d04c8b64"
last-modified: Thu, 30 Apr 2026 07:18:30 GMT

Content Headers

Content-Length

Content

3609

Content-Type

Content

text/html

content-length: 3609
content-type: text/html

Server Headers

No server headers found

CORS Headers

Access-Control-Allow-Origin

Cors

*

access-control-allow-origin: *

Cookies Headers

No cookies headers found

Other Headers

Date

Other

Sat, 02 May 2026 23:06:22 GMT

date: Sat, 02 May 2026 23:06:22 GMT

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching