HTTP Headers Analysis for https://brandfolder.com

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=63072000; includeSubDomains; preload

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Content-Security-Policy header to prevent XSS attacks
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Vary

Performance

Origin

connection: close
vary: Origin

Caching Headers

Cache-Control

Caching

max-age=0, private, must-revalidate

Etag

Caching

W/"b07e81235d903b0b8425de7f31a01d96"

cache-control: max-age=0, private, must-revalidate
etag: W/"b07e81235d903b0b8425de7f31a01d96"

Content Headers

Content-Length

Content

61360

Content-Type

Content

text/html; charset=utf-8

content-length: 61360
content-type: text/html; charset=utf-8

Server Headers

X-Runtime

Server

0.021966

x-runtime: 0.021966

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: _brandfolder.session_id=SThHNVVjWHB6Yk5uNWtoT2RERkFSUGoxeVJPTXVxZXhvc0NNcXhYb2hsZHFyRU9sUklnb3hRandTZmtBZ0F4R1dYVDIrQllkdjlUNU9ZcEJpRXhLNktxajJwZnArNlpEOWlqZklZUVErbHBUTEdGbG5ldHY3OTU0ejVFNnROSUxGR3htdnB5N1d6dlgyNnV0VFZ2aGRLbTIxSWtZTFN3UnVFb0x2L0p0elpGdFdPdjlDcVpxNkVoSm9mVkROMVRlRzQwS1Fjem5UV3FsNi90LzFDdXhseFpRbmJYMDBmcVJsYjFKSSsrRjI2dU1tT3phTFg0ODVyTms2OEIyM3NYdC0tbkdmUmd5WU5UMGZtWEF5VzhMNXlhZz09--1ac4a4dc7c5921ad37513cead9bf89dd6e7e08f2; domain=brandfolder.com; path=/; expires=Wed, 13 May 2026 22:48:54 GMT; secure; HttpOnly

Other Headers

Alt-Svc

Other

h3=":443"; ma=2592000

Date

Other

Wed, 13 May 2026 03:48:54 GMT

P3p

Other

CP="Prizza"

Via

Other

1.1 google

X-Request-Id

Other

8a9b5c6e-0d4a-4de8-aee0-f1601da0e59a

alt-svc: h3=":443"; ma=2592000
date: Wed, 13 May 2026 03:48:54 GMT
p3p: CP="Prizza"
via: 1.1 google
x-request-id: 8a9b5c6e-0d4a-4de8-aee0-f1601da0e59a

Recommendations

Enable compression (gzip/brotli) to improve performance