Open
Cached
·
just now
22
Headers
Detected Technologies from Headers
YouTube
Algolia
Amazon S3
Azure Blob Storage
Calendly
Contentful
Google Analytics
Google Conversion Tracking
Google DoubleClick
Google Fonts
Google Search
Google Static File Front End
Google Tag Manager
Greenhouse
HubSpot
HubSpot Analytics
HubSpot Forms
IP-API
LinkedIn
Mixpanel
Mux
Next.js
Sentry
Vector
Visual Website Optimizer
Wistia
HTTP Security Headers
Status
Strict-Transport-Security
Good
max-age=31536000; includeSubDomains
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
no-referrer
Permissions-Policy
Present
autoplay=()
Recommendations
- • Consider adding 'preload' to HSTS for maximum security
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
Performance Headers
Connection
close
Vary
rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding
connection: close vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding
Caching Headers
Cache-Control
public,max-age=3600,s-maxage=3600,stale-while-revalidate=31449600
Etag
"bdst01iow13cpt"
cache-control: public,max-age=3600,s-maxage=3600,stale-while-revalidate=31449600 etag: "bdst01iow13cpt"
Content Headers
Content-Length
156528
Content-Type
text/html; charset=utf-8
content-length: 156528 content-type: text/html; charset=utf-8
Server Headers
Server
Google Frontend
X-Powered-By
Next.js
server: Google Frontend x-powered-by: Next.js
CORS Headers
No CORS headers found
Cookies Headers
Other Headers
Alt-Svc
h3=":443"; ma=2592000
Date
Sun, 17 May 2026 15:59:56 GMT
Via
1.1 google
X-Cloud-Trace-Context
419db12371840c316a216435eb3dc023
X-Nextjs-Cache
HIT
X-Nextjs-Prerender
1
X-Nextjs-Stale-Time
300
alt-svc: h3=":443"; ma=2592000 date: Sun, 17 May 2026 15:59:56 GMT via: 1.1 google x-cloud-trace-context: 419db12371840c316a216435eb3dc023 x-nextjs-cache: HIT x-nextjs-prerender: 1 x-nextjs-stale-time: 300
Recommendations
Enable compression (gzip/brotli) to improve performance
Consider removing X-Powered-By header to hide server technology