Open
Cached
·
just now
20
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Excellent
max-age=31536000; includeSubDomains; preload
Content-Security-Policy
Basic
default-src; script-src; object-src; +10 more
default-src 'self' https://d1culzimi74ed4.cloudfront.net;script-src 'self' 'unsafe-inline' 'unsafe-eval' code.jquery.com ajax.googleapis.com www.gstatic.com cdn-uks.workrite.co.uk https://az416426.vo.msecnd.net dc.services.visualstudio.com postu11116.pcapredict.com services.postcodeanywhere.co.uk https://d1culzimi74ed4.cloudfront.net/js/feedback/feedback.js https://static.zdassets.com https://ekr.zdassets.com https://widget-mediator.zopim.com https://ajax.aspnetcdn.com *.aptrinsic.com/;object-src 'self';style-src 'self' 'unsafe-inline' fonts.googleapis.com maxcdn.bootstrapcdn.com www.gstatic.com cdn-uks.workrite.co.uk services.postcodeanywhere.co.uk https://code.jquery.com *.aptrinsic.com/;img-src 'self' https://code.jquery.com cdn-uks.workrite.co.uk workritecdn.blob.core.windows.net qwrprdcdnuks.blob.core.windows.net data: https://workrite.helprace.com https://media.graphassets.com https://eu-central-1.graphassets.com *.aptrinsic.com/ storage.googleapis.com;media-src 'self' cdn-uks.workrite.co.uk https://static.zdassets.com https://ekr.zdassets.com https://cdn-uks.workrite.co.uk https://qwrprdcdnuks.blob.core.windows.net;frame-src 'self' https://cloud.scorm.com https://workrite.helprace.com https://cdn-uks.workrite.co.uk https://qwrprdcdnuks.blob.core.windows.net;font-src 'self' cdn-uks.workrite.co.uk qwrprdcdnuks.blob.core.windows.net fonts.gstatic.com;connect-src 'self' https://dc.services.visualstudio.com https://static.zdassets.com https://ekr.zdassets.com https://qpulse345678.zendesk.com https://widget-mediator.zopim.com wss://widget-mediator.zopim.com https://workrite.zendesk.com *.aptrinsic.com;base-uri 'self';form-action 'self' *;frame-ancestors 'self';worker-src 'self'
X-Frame-Options
Good
SameOrigin
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Present
same-origin
Permissions-Policy
Missing
Not configured
Recommendations
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Consider adding Permissions-Policy to control browser features
Performance Headers
1 headers
Connection
Performance
close
Caching Headers
3 headers
Cache-Control
Caching
no-cache, no-store, must-revalidate
Expires
Caching
-1
Pragma
Caching
no-cache
Content Headers
2 headers
Content-Length
Content
13706
Content-Type
Content
text/html; charset=utf-8
Server Headers
0 headers
No server headers found
CORS Headers
1 headers
Access-Control-Expose-Headers
Cors
Request-Context
Cookies Headers
1 headers
Set-Cookie
Cookies
__RequestVerificationToken=ZGUro8d_aY8oHyadMHMzeUoO7HavPKzmMXSmVyOAWGyV5PfqraCpZTkX_ClH0aN0lz-4AlsIvT1yg34C2U0quyw3CIU1; path=/; secure; HttpOnly; SameSite=Lax
Other Headers
5 headers
Date
Other
Mon, 22 Dec 2025 14:05:28 GMT
Feature-Policy
Other
accelerometer 'none'; ambient-light-sensor 'none'; autoplay 'none'; camera 'none'; fullscreen 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; midi 'none'; payment 'none'; picture-in-picture 'none'; usb 'none';
Refresh
Other
3600
Request-Context
Other
appId=cid-v1:86001476-d803-491e-aa3e-5a1730a9f4d2
X-Robots-Tag
Other
notranslate
Recommendations
Enable compression (gzip/brotli) to improve performance
Analysis completed in 621ms