13 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31536000
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Consider adding Permissions-Policy to control browser features

Performance Headers

1 headers
Connection
Performance
keep-alive

Caching Headers

0 headers
No caching headers found

Content Headers

2 headers
Content-Language
Content
en
Content-Length
Content
0

Server Headers

0 headers
No server headers found

CORS Headers

0 headers
No CORS headers found

Cookies Headers

1 headers
Set-Cookie
Cookies
bm_sz=11D1A75670F63F3D2E063123046720C7~YAAQUsgwF2D/MpCaAQAAftFFqx3+KbXOkge5njKhNENfFd6CyglLeM2nqXDz1JI32EgKAZ33DBMVAE6OqwQR5qbvOu+wb6L1U9E74zxm/f0FXc5XdirFqHm7U8WPV2rw+H9EAhB6KQsDzO7QTdAe1Zdn4Ja1Nxbsvf1pPTgTm44MRt75pmZ87eEOh9tld3KBdp3P+XDGOfdAjI5T6bHLJqzOA+TzZz+dVr296fsot/w5z50eSn1KBB3eDYvWwX4D6Pz5i83m5sIVJZbxeenw+4HiB4+2OJT4BVfURtSQHXP7rRWnxQv4rUigbxErko8mo+V4vvOe8AhUm9gb5eHfUuRh96ZZvlXr~3359044~3229235; Domain=.ibm.com; Path=/; Expires=Sat, 22 Nov 2025 15:14:30 GMT; Max-Age=14400; SameSite=None; Secure

Other Headers

4 headers
Akamai-Grn
Other
0.52c83017.1763810070.4bbc16f9
Date
Other
Sat, 22 Nov 2025 11:14:30 GMT
X-Envoy-Upstream-Service-Time
Other
7
X-Response-Time
Other
3.878

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching

Analysis completed in 94ms