HTTP Headers Analysis for https://app.polytomic.com

Detected Technologies from Headers

See all in URL Inspect 7

Amplitude

Datadog

Fullstory

Google API JS Client

Google Fonts

G Workspace

Sentry

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=15724800; includeSubDomains

Content-Security-Policy

Basic

base-uri; default-src; connect-src; +10 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Present

camera=(), geolocation=(), microphone=()

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Improve CSP by adding more specific directives and removing 'unsafe-inline'

Performance Headers

Accept-Ranges

Performance

bytes

Connection

Performance

close

Vary

Performance

Origin

accept-ranges: bytes
connection: close
vary: Origin

Caching Headers

Cache-Control

Caching

no-cache, no-store, must-revalidate

Last-Modified

Caching

Sun, 12 Apr 2026 20:40:32 GMT

cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 12 Apr 2026 20:40:32 GMT

Content Headers

Content-Length

Content

2329

Content-Type

Content

text/html; charset=utf-8

content-length: 2329
content-type: text/html; charset=utf-8

Server Headers

Server

Polytomic

server: Polytomic

CORS Headers

Access-Control-Allow-Origin

Cors

https://app.polytomic.com

access-control-allow-origin: https://app.polytomic.com

Cookies Headers

Set-Cookie

Cookies

set-cookie: AWSALB=u5SDu1Ki2D+1rZQVkw/Z/ztcuv5lYmWkDdlutra1dRPp3ojXBAjO8uEzwpOzbklwQAaqBV+lpcpcOccQPx+YKqduSBRu8OlrkFQFT6riVRI7bP9V3HjcesdXC6Ku; Expires=Mon, 20 Apr 2026 10:04:02 GMT; Path=/
AWSALBCORS=u5SDu1Ki2D+1rZQVkw/Z/ztcuv5lYmWkDdlutra1dRPp3ojXBAjO8uEzwpOzbklwQAaqBV+lpcpcOccQPx+YKqduSBRu8OlrkFQFT6riVRI7bP9V3HjcesdXC6Ku; Expires=Mon, 20 Apr 2026 10:04:02 GMT; Path=/; SameSite=None; Secure

Other Headers

Date

Other

Mon, 13 Apr 2026 10:04:02 GMT

Request-Id

Other

53999cc5-ed55-417e-89fb-04a686c9e9a8

date: Mon, 13 Apr 2026 10:04:02 GMT
request-id: 53999cc5-ed55-417e-89fb-04a686c9e9a8

Recommendations

Enable compression (gzip/brotli) to improve performance