Open
Cached
·
just now
26
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31536000; preload
Content-Security-Policy
Strong
default-src; base-uri; img-src; +8 more
default-src 'self'; base-uri 'none'; img-src 'self' *.publishing.service.gov.uk www.gov.uk *.dev.gov.uk www.google-analytics.com ssl.google-analytics.com stats.g.doubleclick.net www.googletagmanager.com www.region1.google-analytics.com region1.google-analytics.com region1.analytics.google.com www.google.co.uk lux.speedcurve.com assets.digital.cabinet-office.gov.uk https://img.youtube.com https://i.ytimg.com; script-src 'self' www.google-analytics.com ssl.google-analytics.com stats.g.doubleclick.net www.googletagmanager.com www.region1.google-analytics.com region1.google-analytics.com region1.analytics.google.com www.google.co.uk www.gstatic.com *.ytimg.com www.youtube.com www.youtube-nocookie.com 'nonce-tVn5TH4VP9XoPrnOqSniow=='; style-src 'self' www.gstatic.com; font-src 'self'; connect-src 'self' *.publishing.service.gov.uk www.gov.uk *.dev.gov.uk www.google-analytics.com ssl.google-analytics.com stats.g.doubleclick.net www.googletagmanager.com www.region1.google-analytics.com region1.google-analytics.com region1.analytics.google.com www.google.co.uk lux.speedcurve.com gds-single-consent-staging.app gds-single-consent.app; object-src 'none'; frame-src 'self' *.publishing.service.gov.uk www.gov.uk *.dev.gov.uk www.youtube.com www.youtube-nocookie.com; frame-ancestors 'self' *.publishing.service.gov.uk www.gov.uk *.dev.gov.uk; report-uri https://csp-reporter.publishing.service.gov.uk/report
X-Frame-Options
Present
ALLOWALL
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Present
interest-cohort=()
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
Performance Headers
3 headers
Accept-Ranges
Performance
bytes
Connection
Performance
close
Vary
Performance
Accept-Encoding
Caching Headers
3 headers
Age
Caching
0
Cache-Control
Caching
max-age=300, public
Etag
Caching
W/"037e0f700c27c21056c542744e4d5d24"
Content Headers
2 headers
Content-Length
Content
138534
Content-Type
Content
text/html; charset=utf-8
Server Headers
2 headers
Server
Server
nginx
X-Runtime
Server
0.353344
CORS Headers
0 headers
No CORS headers found
Cookies Headers
0 headers
No cookies headers found
Other Headers
11 headers
Alt-Svc
Other
h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Date
Other
Sun, 11 Jan 2026 08:42:19 GMT
Fastly-Backend-Name
Other
origin
Link
Other
</assets/collections/views/_organisation-9b5c26019b4dc42074f08b1fc7b9fdfa04240010bb908aaefb02e487c48ce561.css>; rel=preload; as=style; nopush,</assets/collections/govuk_publishing_components/vendor/lux/lux-measurer-d66192b1b665d415e1874e49a48138b7ae339548aa6cdb8687c7f9933e72b969.js>; rel=preload; as=script; nopush,</assets/collections/govuk_publishing_components/rum-custom-data-b9e1806d1da2fa8ef1855d01aa71ba5eb0afc010dd2c4de3672cc7c7a39b0c8c.js>; rel=modulepreload; as=script; nopush,</assets/collections/govuk_publishing_components/rum-loader-a65b10e18ceeba3bd8a2eac507c7f2c513cdc82f35097df903fdea87f1dc2e33.js>; rel=preload; as=script; nopush,</assets/collections/govuk_publishing_components/load-analytics-2fedf6967543ecf2e1442db2ee751262d0b0227274dc3fbb7f8df6db459b77d8.js>; rel=modulepreload; as=script; nopush,</assets/collections/application-d400bf5026c62e7e965edbbb70794198672a31cac2db2fb8dc41e18214911612.css>; rel=preload; as=style; nopush
Server-Timing
Other
cacheMiss
Via
Other
1.1 router, 1.1 varnish
X-Cache
Other
MISS
X-Cache-Hits
Other
0
X-Request-Id
Other
af1bcba1-af80-4155-8aba-e01b98866220
X-Served-By
Other
cache-ewr-kewr1740069-EWR
X-Timer
Other
S1768120939.378530,VS0,VE546
Recommendations
Enable compression (gzip/brotli) to improve performance