HTTP Headers Analysis for https://app.hive.com

Detected Technologies from Headers

See all in URL Inspect 21

AWS CloudFront

Adobe Fonts (Typekit)

Box

Canny

Facebook

Fullstory

Google API JS Client

Google Cloud Storage

Google Conversion Tracking

Google DoubleClick

Google Fonts

Google Tag Manager

HubSpot

HubSpot Analytics

Intercom

Nginx

Pendo

Segment

YouTube

Zscaler

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=2592000; includeSubDomains, max-age=31536000; includeSubDomains;

Content-Security-Policy

Weak

frame-ancestors Analyze

Content-Security-Policy-Report-Only

Basic

default-src; script-src; connect-src; +8 more Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Significantly strengthen CSP directives
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

Accept-Encoding

connection: close
transfer-encoding: chunked
vary: Accept-Encoding

Caching Headers

Cache-Control

Caching

no-store

Expires

Caching

0

Pragma

Caching

no-cache

cache-control: no-store
expires: 0
pragma: no-cache

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

Server

nginx

server: nginx

CORS Headers

Access-Control-Allow-Headers

Cors

null

Access-Control-Allow-Origin

Cors

null

access-control-allow-headers: null
access-control-allow-origin: null

Cookies Headers

Set-Cookie

Cookies

set-cookie: AWSALBTG=0uJtxRuPKi8gKDuRotQk7j7Emo9E9TP7IJFH8Y5toix0Jwmqmebvb9R7H1P0i9+Ipt4ZthNGdwCzVOGDiZSLH/QIK5ie2HXJrDAdiU3q9WI0l6dfLMOWdr7nZDF1BFgJxqY1zXFI2KsDrk5Re8OQconyiy7MxhCXpiHyDTZuKshwq78NKUE=; Expires=Sat, 16 May 2026 08:27:14 GMT; Path=/
AWSALBTGCORS=0uJtxRuPKi8gKDuRotQk7j7Emo9E9TP7IJFH8Y5toix0Jwmqmebvb9R7H1P0i9+Ipt4ZthNGdwCzVOGDiZSLH/QIK5ie2HXJrDAdiU3q9WI0l6dfLMOWdr7nZDF1BFgJxqY1zXFI2KsDrk5Re8OQconyiy7MxhCXpiHyDTZuKshwq78NKUE=; Expires=Sat, 16 May 2026 08:27:14 GMT; Path=/; SameSite=None; Secure
AWSALB=5r9kjxCr10c2ifLaYuRT2amyJ7QY5/VVEAfnPizRBKmcSqq3r59PbnNtc78jVNLElPs+otO9UktT0GKRVfOECD66zVCNw0uO3FQVjs/6CzxZhVYEDBJ2wmRSdcNB; Expires=Sat, 16 May 2026 08:27:14 GMT; Path=/
AWSALBCORS=5r9kjxCr10c2ifLaYuRT2amyJ7QY5/VVEAfnPizRBKmcSqq3r59PbnNtc78jVNLElPs+otO9UktT0GKRVfOECD66zVCNw0uO3FQVjs/6CzxZhVYEDBJ2wmRSdcNB; Expires=Sat, 16 May 2026 08:27:14 GMT; Path=/; SameSite=None; Secure

Other Headers

Date

Other

Sat, 09 May 2026 08:27:14 GMT

Report-To

Other

Group hive-csp max-age: 18w

Endpoint 1 /csp_violations

Reporting-Endpoints

Other

hive-csp="/csp_violations"

date: Sat, 09 May 2026 08:27:14 GMT
report-to: {"group":"hive-csp","max_age":10886400,"endpoints":[{"url":"/csp_violations"}]}
reporting-endpoints: hive-csp="/csp_violations"

Recommendations

Enable compression (gzip/brotli) to improve performance