HTTP Headers Analysis for https://collector.github.com

Detected Technologies from Headers

See all in URL Inspect 1

GitHub

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=631138519

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Add Content-Security-Policy header to prevent XSS attacks
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

max-age=0, private, must-revalidate

Etag

Caching

W/"4461603b7e62e1e8dd5d213e2584b486"

cache-control: max-age=0, private, must-revalidate
etag: W/"4461603b7e62e1e8dd5d213e2584b486"

Content Headers

Content-Length

Content

334

Content-Type

Content

text/html; charset=utf-8

content-length: 334
content-type: text/html; charset=utf-8

Server Headers

X-Runtime

Server

0.007236

x-runtime: 0.007236

CORS Headers

No CORS headers found

Cookies Headers

No cookies headers found

Other Headers

Date

Other

Sun, 22 Feb 2026 14:26:09 GMT

X-Download-Options

Other

noopen

X-Github-Backend

Other

Kubernetes

X-Github-Request-Id

Other

96F8:2BC06D:2A0A771:3803F3E:699B1201

X-Permitted-Cross-Domain-Policies

Other

none

date: Sun, 22 Feb 2026 14:26:09 GMT
x-download-options: noopen
x-github-backend: Kubernetes
x-github-request-id: 96F8:2BC06D:2A0A771:3803F3E:699B1201
x-permitted-cross-domain-policies: none

Recommendations

Enable compression (gzip/brotli) to improve performance