Open
Cached
·
just now
15
Headers
Detected Technologies from Headers
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31536000;
X-Frame-Options
Excellent
deny
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
no-referrer
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Significantly strengthen CSP directives
- • Consider adding Permissions-Policy to control browser features
Performance Headers
Connection
close
Vary
Origin
connection: close vary: Origin
Caching Headers
No caching headers found
Content Headers
Content-Length
24
Content-Type
application/json
content-length: 24 content-type: application/json
Server Headers
Server
istio-envoy
server: istio-envoy
CORS Headers
No CORS headers found
Cookies Headers
Other Headers
Date
Mon, 27 Jul 2026 19:50:41 GMT
X-Download-Options
noopen
X-Envoy-Upstream-Service-Time
4
X-Request-Id
5497811d-4c07-92e9-a403-2e876c81d894
date: Mon, 27 Jul 2026 19:50:41 GMT x-download-options: noopen x-envoy-upstream-service-time: 4 x-request-id: 5497811d-4c07-92e9-a403-2e876c81d894
Recommendations
Enable compression (gzip/brotli) to improve performance
Add Cache-Control header to optimize caching