HTTP Headers Analysis for https://devs.ai

Detected Technologies from Headers

See all in URL Inspect 20

AppDirect

Azure Blob Storage

Clerk

Cloudflare CDNJS

Cloudinary

CodeSandbox

Datadog

ElevenLabs

Google Analytics

Google API JS Client

Google Fonts

Google Search

Google Sign-In

Google Tag Manager

HubSpot

Next.js

Report URI

Stripe

Vercel

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=63072000

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Basic

default-src; script-src; script-src-elem; +13 more Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Accept-Ranges

Performance

bytes

Connection

Performance

close

Vary

Performance

rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch

accept-ranges: bytes
connection: close
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch

Caching Headers

Age

Caching

108316

Cache-Control

Caching

public, max-age=0, must-revalidate

Etag

Caching

"4a3569433595c459b895bb2edde9bd40"

age: 108316
cache-control: public, max-age=0, must-revalidate
etag: "4a3569433595c459b895bb2edde9bd40"

Content Headers

Content-Disposition

Content

inline

Content-Length

Content

119233

Content-Type

Content

text/html; charset=utf-8

content-disposition: inline
content-length: 119233
content-type: text/html; charset=utf-8

Server Headers

Server

Vercel

server: Vercel

CORS Headers

Access-Control-Allow-Origin

Cors

*

access-control-allow-origin: *

Cookies Headers

No cookies headers found

Other Headers

Date

Other

Sat, 09 May 2026 03:21:00 GMT

X-Clerk-Auth-Reason

Other

session-token-and-uat-missing

X-Clerk-Auth-Status

Other

signed-out

X-Matched-Path

Other

/home

X-Nextjs-Prerender

Other

1

X-Nextjs-Stale-Time

Other

300

X-Vercel-Cache

Other

HIT

X-Vercel-Id

Other

iad1::f6vn4-1778296860502-5891b48bee6e

date: Sat, 09 May 2026 03:21:00 GMT
x-clerk-auth-reason: session-token-and-uat-missing
x-clerk-auth-status: signed-out
x-matched-path: /home
x-nextjs-prerender: 1
x-nextjs-stale-time: 300
x-vercel-cache: HIT
x-vercel-id: iad1::f6vn4-1778296860502-5891b48bee6e

Recommendations

Enable compression (gzip/brotli) to improve performance