HTTP Headers Analysis for https://app.klue.com

Detected Technologies from Headers

See all in URL Inspect 18

AWS CloudFront

Airbrake

Amazon S3

ClearBit

Cloudflare CDN

Cloudflare Web Analytics

Google Analytics

Google API JS Client

Google DoubleClick

Heroku

Intercom

New Relic

Pendo

Report URI

Salesforce Cloud

Salesforce Sites

Slack

Twitter

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=63072000; includeSubDomains

Content-Security-Policy

Good

base-uri; connect-src; default-src; +9 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Present

same-origin

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Strengthen CSP by removing 'unsafe-eval'
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

accept-encoding

connection: close
transfer-encoding: chunked
vary: accept-encoding

Caching Headers

Cache-Control

Caching

no-store

Pragma

Caching

no-cache

cache-control: no-store
pragma: no-cache

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

Server

cloudflare

X-Runtime

Server

0.015662

server: cloudflare
x-runtime: 0.015662

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: ahoy_track=true; path=/; httponly; samesite=none; secure
ahoy_visitor=255f29b8-d439-4cbb-b55a-1d7e7680d53a; path=/; expires=Tue, 09 May 2028 02:36:53 GMT; httponly; samesite=none; secure
ahoy_visit=a866c98f-dc86-4542-9266-b433a29368d1; path=/; expires=Sat, 09 May 2026 06:36:53 GMT; httponly; samesite=none; secure
_klue_session2=cbb18e9b376649c6ac2765f65bba35a2; domain=app.klue.com; path=/; secure; httponly; samesite=none

Other Headers

Cf-Cache-Status

Other

DYNAMIC

Cf-Ray

Other

9f8d51b4cd6d7ff3-IAD

Date

Other

Sat, 09 May 2026 02:36:53 GMT

Link

Other

URL

https://dycj3q34rhqmj.cloudfront.net/assets/application-5160f56b2f44e5afee59864e3fa2ebc34fd2a1836bd587e680328641dd4d53c8.js

rel=preload as=script crossorigin=anonymous integrity=sha256-YzWqtO3SbzyNxd6UGAUj+dedwOs9mYrrt9K4i6q3RZQ= nonce=tVbpQCcCRe0ghcojFOGq7Q== nopush

URL

https://dycj3q34rhqmj.cloudfront.net/assets/application-fafd14ff7f6f6ddc350db068bb11b7dc2c42e2ec29a7604849bf1a12e60dfb57.css

rel=preload as=style crossorigin=anonymous integrity=sha256-lFSFqNzmgHC3EDvok7FFVpwh4iCnyl8gfcQCGaAblP0= nopush

Nel

Other

Report-To Group heroku-nel max-age: 1h

success: 1.0% failure: 10.0%

Report-To

Other

Group heroku-nel max-age: 1h

Endpoint 1 https://nel.heroku.com/reports?s=RR%2BkoXIXGZGkkYorZI9jOZz%2B4BCu0fY%2BwQaJFil97oI%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1778294213

Reporting-Endpoints

Other

heroku-nel="https://nel.heroku.com/reports?s=RR%2BkoXIXGZGkkYorZI9jOZz%2B4BCu0fY%2BwQaJFil97oI%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1778294213"

Server-Timing

Other

cfCacheStatus;desc="DYNAMIC", cfEdge;dur=26,cfOrigin;dur=29

Via

Other

2.0 heroku-router

X-Csrf-Token

Other

kzPAEF8qlq3tESejdQSOu0aMl2oKuCpY1BUpHCIRz_AeHKh0-jkpu4S2Hlw7TaYee94JelGEvjgG4tKwEzSNZg

X-Permitted-Cross-Domain-Policies

Other

none

X-Request-Id

Other

259a744b-adfa-db2f-3ff8-9e952ecce149

cf-cache-status: DYNAMIC
cf-ray: 9f8d51b4cd6d7ff3-IAD
date: Sat, 09 May 2026 02:36:53 GMT
link: <https://dycj3q34rhqmj.cloudfront.net/assets/application-5160f56b2f44e5afee59864e3fa2ebc34fd2a1836bd587e680328641dd4d53c8.js>; rel=preload; as=script; crossorigin=anonymous; integrity=sha256-YzWqtO3SbzyNxd6UGAUj+dedwOs9mYrrt9K4i6q3RZQ=; nonce=tVbpQCcCRe0ghcojFOGq7Q==; nopush,<https://dycj3q34rhqmj.cloudfront.net/assets/application-fafd14ff7f6f6ddc350db068bb11b7dc2c42e2ec29a7604849bf1a12e60dfb57.css>; rel=preload; as=style; crossorigin=anonymous; integrity=sha256-lFSFqNzmgHC3EDvok7FFVpwh4iCnyl8gfcQCGaAblP0=; nopush
nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
report-to: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=RR%2BkoXIXGZGkkYorZI9jOZz%2B4BCu0fY%2BwQaJFil97oI%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1778294213"}],"max_age":3600}
reporting-endpoints: heroku-nel="https://nel.heroku.com/reports?s=RR%2BkoXIXGZGkkYorZI9jOZz%2B4BCu0fY%2BwQaJFil97oI%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1778294213"
server-timing: cfCacheStatus;desc="DYNAMIC", cfEdge;dur=26,cfOrigin;dur=29
via: 2.0 heroku-router
x-csrf-token: kzPAEF8qlq3tESejdQSOu0aMl2oKuCpY1BUpHCIRz_AeHKh0-jkpu4S2Hlw7TaYee94JelGEvjgG4tKwEzSNZg
x-permitted-cross-domain-policies: none
x-request-id: 259a744b-adfa-db2f-3ff8-9e952ecce149

Recommendations

Enable compression (gzip/brotli) to improve performance