HTTP Headers Analysis for https://dashboard.staging.knotapi.com

Detected Technologies from Headers

See all in URL Inspect 12

Gravatar

Amplitude

Google Cloud Storage

Google Fonts

Imgix

Nuxt

OpenAI

Pusher

Segment

Sentry Active incidents

Stripe

Vercel

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=63072000

Content-Security-Policy

Good

default-src; script-src; style-src; +5 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Strengthen CSP by removing 'unsafe-eval'
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Age

Caching

0

Cache-Control

Caching

public, max-age=0, must-revalidate

age: 0
cache-control: public, max-age=0, must-revalidate

Content Headers

Content-Length

Content

598395

Content-Type

Content

text/html;charset=utf-8

content-length: 598395
content-type: text/html;charset=utf-8

Server Headers

Server

Vercel

X-Powered-By

Server

Nuxt

server: Vercel
x-powered-by: Nuxt

CORS Headers

No CORS headers found

Cookies Headers

No cookies headers found

Other Headers

Date

Other

Tue, 12 May 2026 12:55:35 GMT

X-Vercel-Cache

Other

MISS

X-Vercel-Id

Other

iad1::iad1::6tv5r-1778590533029-82960e13b935

date: Tue, 12 May 2026 12:55:35 GMT
x-vercel-cache: MISS
x-vercel-id: iad1::iad1::6tv5r-1778590533029-82960e13b935

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology