Cached · just now
24 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=63072000
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Present
allow-from https://app.contentful.com
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Consider adding Permissions-Policy to control browser features

Performance Headers

Connection
Performance
close
Transfer-Encoding
Performance
chunked
Vary
Performance
RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch

Caching Headers

Age
Caching
0
Cache-Control
Caching
private, no-cache, no-store, max-age=0, must-revalidate

Content Headers

Content-Type
Content
text/html; charset=utf-8

Server Headers

Server
Server
Vercel
X-Powered-By
Server
Next.js

CORS Headers

Access-Control-Allow-Methods
Cors
GET,OPTIONS,PATCH,DELETE,POST,PUT
Access-Control-Allow-Origin
Cors
*

Cookies Headers

No cookies headers found

Other Headers

Date
Other
Mon, 13 Apr 2026 16:30:37 GMT
Link
Other
X-Locale
Other
en-US
X-Matched-Path
Other
/
X-Next-Intl-Locale
Other
en-US
X-Next-Intl-Pathname
Other
/
X-Use-Next-Intl
Other
true
X-Vercel-Cache
Other
MISS
X-Vercel-Id
Other
iad1::iad1::bg544-1776097836623-9c9ae2d6ca08

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology