HTTP Headers Analysis for https://centrify.com

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Weak

upgrade-insecure-requests

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

no-referrer-when-downgrade

Permissions-Policy

Present

geolocation=(), microphone=()

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Significantly strengthen CSP directives

Performance Headers

2 headers

Connection

Performance

keep-alive

Transfer-Encoding

Performance

chunked

Caching Headers

2 headers

Cache-Control

Caching

s-maxage=36000, max-age=5

Last-Modified

Caching

Fri, 07 Nov 2025 20:17:04 GMT

Content Headers

1 headers

Content-Type

Content

text/html; charset=UTF-8

Server Headers

1 headers

Server

cloudflare

CORS Headers

0 headers

No CORS headers found

Cookies Headers

1 headers

Set-Cookie

Cookies

_cfuvid=Iu4pj5qT2rseoLIeW_zmp7cGmqof6UMmuCPyUvg4juQ-1762634640882-0.0.1.1-604800000; path=/; domain=.delinea.com; HttpOnly; Secure; SameSite=None

Other Headers

16 headers

Alt-Svc

Other

h3=":443"; ma=86400

Cf-Ray

Other

99b7e7e93c6b31bb-IAD

Content-Security-Policy-Report-Only

Other

script-src 'unsafe-inline' 'unsafe-eval' cdn2.hubspot.net *.hubspot.com *.hubspotusercontent10.net js.hscollectedforms.net js.hsleadflows.net js.hs-scripts.com js.hsadspixel.net js.hs-analytics.net js.hs-banner.com js.hs-banner.net *.hsforms.net *.hsforms.com static.hsappstatic.net js.hubspotfeedback.com feedback.hubapi.com js.usemessages.com *.vidyard.com cdnjs.cloudflare.com cdnjs.cloudflare.com 10921146.fls.doubleclick.net plausible.io *.hotjar.com *.hotjar.io *.qualified.com bttrack.com *.googletagmanager.com *.force.com *.thycotic.com *.centrify.com *.bidr.io *.rlcdn.cm t.co *.twitter.com burly.io *.clickagy.com *.doubleclck.net *.zoominfo.com lltrck.com facebook.com *.facebook.net *.redditstatic.com *.linkedin.com *.licdn.com *.demandbase.com *.zoominfo.com 'strict-dynamic' 'nonce-W8RwEduCvfPRSeYwJ6SQ4Q=='

Date

Other

Sat, 08 Nov 2025 20:44:00 GMT

Edge-Cache-Tag

Other

CT-81662001991,P-19928113,CW-198160083085,CW-198186157882,CW-198874563912,CW-59050125915,CW-68310524451,E-119583394938,E-119591005505,E-196679039147,E-196681287535,E-197137941037,E-198877805691,E-52535439255,E-52540273300,E-52541195776,E-52542647577,E-60353961260,RA-197137910962,RA-59049390477,RA-61150517042,RA-61150517043,RA-61151671944,PGS-ALL,SW-1,GC-197031949845,GC-198467179033,GC-198872371745,TS-52542647610

Link

Other

<https://cdn.cookielaw.org/scripttemplates/otSDKStub.js>; rel=preload; as=script,<https://delinea.com/hubfs/hub_generated/template_assets/1/52541195776/1762443594175/template_main.min.css>; rel=preload; as=style,<https://delinea.com/hubfs/hub_generated/template_assets/1/52535439255/1762443583047/template_theme-overrides.css>; rel=preload; as=style,<https://delinea.com/hubfs/hub_generated/template_assets/1/198877805691/1762458594806/template_nav-footer-only.min.css>; rel=preload; as=style,<https://7052064.fs1.hubspotusercontent-na1.net/hubfs/7052064/hub_generated/module_assets/1/-2712622/1762452566758/module_search_input.min.css>; rel=preload; as=style

Nel

Other

{"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}

Report-To

Other

{"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rDPPkmNSE8my%2FXr3h8MXTdnnYOsLoxTY0pm%2FVHvxQwnlOGBijNGwWJZWD43ZpRDElMn4mCSU4uN2S%2B65z85RVTmQz68rHVYs84Hrp3NbpKHIU199MbCMv6vWTKMK"}],"group":"cf-nel","max_age":604800}

X-Hs-Cache-Config

Other

BrowserCache-5s-EdgeCache-180s

X-Hs-Cache-Control

Other

s-maxage=36000, max-age=0

X-Hs-Cf-Cache-Status

Other

HIT

X-Hs-Cfworker-Meta

Other

{"contentType":"SITE_PAGE","resolver":"PreRenderedContentResolver"}