HTTP Headers Analysis for https://blog.centrify.com

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Weak

upgrade-insecure-requests

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

no-referrer-when-downgrade

Permissions-Policy

Present

geolocation=(), microphone=()

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Significantly strengthen CSP directives

Performance Headers

2 headers

Connection

Performance

keep-alive

Transfer-Encoding

Performance

chunked

Caching Headers

2 headers

Cache-Control

Caching

no-store, no-cache, must-revalidate

Last-Modified

Caching

Sun, 16 Nov 2025 09:31:14 GMT

Content Headers

1 headers

Content-Type

Content

text/html; charset=UTF-8

Server Headers

1 headers

Server

cloudflare

CORS Headers

0 headers

No CORS headers found

Cookies Headers

1 headers

Set-Cookie

Cookies

_cfuvid=XP1QO9Buj6TqGR42KTjpzGe3eDH2Pm3DLKjKtoXkjwc-1763335205595-0.0.1.1-604800000; path=/; domain=.delinea.com; HttpOnly; Secure; SameSite=None

Other Headers

16 headers

Alt-Svc

Other

h3=":443"; ma=86400

Cf-Ray

Other

99fab78a8ae95133-IAD

Content-Security-Policy-Report-Only

Other

script-src 'unsafe-inline' 'unsafe-eval' cdn2.hubspot.net *.hubspot.com *.hubspotusercontent10.net js.hscollectedforms.net js.hsleadflows.net js.hs-scripts.com js.hsadspixel.net js.hs-analytics.net js.hs-banner.com js.hs-banner.net *.hsforms.net *.hsforms.com static.hsappstatic.net js.hubspotfeedback.com feedback.hubapi.com js.usemessages.com *.vidyard.com cdnjs.cloudflare.com cdnjs.cloudflare.com 10921146.fls.doubleclick.net plausible.io *.hotjar.com *.hotjar.io *.qualified.com bttrack.com *.googletagmanager.com *.force.com *.thycotic.com *.centrify.com *.bidr.io *.rlcdn.cm t.co *.twitter.com burly.io *.clickagy.com *.doubleclck.net *.zoominfo.com lltrck.com facebook.com *.facebook.net *.redditstatic.com *.linkedin.com *.licdn.com *.demandbase.com *.zoominfo.com 'strict-dynamic' 'nonce-7nyCmi91THD99Prbs4aByw=='

Date

Other

Sun, 16 Nov 2025 23:20:05 GMT

Edge-Cache-Tag

Other

CT-60971910784,CG-60971910783,P-19928113,CW-134043479702,CW-197388217233,CW-197390354807,CW-197390354813,CW-198160083085,CW-198186157882,CW-198874563912,DB-5312522,DB-5313112,DB-6868999,DB-6876552,DB-6986766,E-119583394938,E-119591005505,E-196679039147,E-196681287509,E-196681287535,E-197137941037,E-197140837704,E-198159988052,E-52540273300,E-52541195776,RA-197137910962,PGS-ALL,SW-1,GC-197031949845,GC-198467179033,GC-198872371745,TS-196679172411

Link

Other

<https://cdn.cookielaw.org/scripttemplates/otSDKStub.js>; rel=preload; as=script,<https://delinea.com/hubfs/hub_generated/template_assets/1/52541195776/1763076343838/template_main.min.css>; rel=preload; as=style,<https://delinea.com/hubfs/hub_generated/template_assets/1/197140837704/1762984150635/template_index.min.css>; rel=preload; as=style,<https://7052064.fs1.hubspotusercontent-na1.net/hubfs/7052064/hub_generated/module_assets/1/-2712622/1763152076104/module_search_input.min.css>; rel=preload; as=style,<https://delinea.com/hubfs/hub_generated/module_assets/1/134043479702/1762984417881/module_cta-blog-insert.min.css>; rel=preload; as=style,<//platform.linkedin.com/in.js>; rel=preload; as=script

Nel

Other

{"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}

Report-To

Other

{"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RHuERF5r5PZuEfU6n8YXuClxoH%2BSLHDudVNeh9%2FMI9t8EF6eDdp%2Bki8jiZqV4wijfpDXviU6PqwB%2FBmebGZGkAo1032oV3%2FmL%2BMr9gdv%2Bq415SybuT0eoa2hLGd7"}],"group":"cf-nel","max_age":604800}

X-Hs-Cache-Config

Other

BrowserCache-5s-EdgeCache-0s

X-Hs-Cache-Control

Other

s-maxage=36000, max-age=0

X-Hs-Cf-Cache-Status

Other

HIT

X-Hs-Cfworker-Meta

Other

{"contentType":"BLOG_LISTING_PAGE","resolver":"PreRenderedContentResolver"}