HTTP Headers Analysis for https://ember-it.secureframetrust.com

Open Cached · just now

23 Headers

Detected Technologies from Headers

See all in URL Inspect 4

Cloudflare NEL Monitoring

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31556952; includeSubDomains

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Present

ALLOW-FROM https://app.secureframe.com

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Present

accelerometer=(), ambient-light-sensor=(), autoplay=(); +17 more

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Add Content-Security-Policy header to prevent XSS attacks

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

connection: close
transfer-encoding: chunked

Caching Headers

Cache-Control

Caching

max-age=0, private, must-revalidate

cache-control: max-age=0, private, must-revalidate

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

Server

Server

cloudflare

X-Runtime

Server

0.040278

server: cloudflare
x-runtime: 0.040278

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: _secureframe_session=LmCLqqKSNarGgsLcyxaOvBd6drYKBNpeu6FvBt7rR%2FCEVUdO6rmva5ZmQArMDIxI%2FGb6U3c8iZb2OKsQ4Ox8SriGsstgvKCTJXneWSM%2Fs9FJJSVjwLwn%2Fg%2B9wYBFi6Wz4ag8WbK8pZZvNpohkSlWZUYUYdUqE6fkS3lbzX1RLjqsB8gA7H1RuF%2FmQ3f1IfL%2B%2FwGVa0awliSA5IQZlT24wP6MakArD3NlChyzbdCuSx7pFLvU110%2BfhBGDb6hUaRr1ehPRPHVZxhZUb%2Fuj0jDeivLh6INOfhXYxwwjA%3D%3D--emYV%2BYoQR8hJz3ek--uU9KKFzJZFK32AKOURDD5w%3D%3D; path=/; HttpOnly; secure

Other Headers

Alt-Svc

Other

h3=":443"; ma=86400

Cf-Cache-Status

Other

DYNAMIC

Cf-Ray

Other

9f9306188cafae7d-IAD

Date

Other

Sat, 09 May 2026 19:13:51 GMT

Link

Other

URL

/vite/assets/index-66f67ac1.css

rel=preload as=style nopush

URL

/vite/assets/vendor-ce74e8c0.css

rel=preload as=style nopush

URL

/vite/assets/vendor-antd-859486c1.css

rel=preload as=style nopush

URL

/vite/assets/prismic-fea5b044.css

rel=preload as=style nopush

Nel

Other

Report-To Group cf-nel max-age: 1w

success: 0.0%

Report-To

Other

Group cf-nel max-age: 1w

Endpoint 1 https://a.nel.cloudflare.com/report/v4?s=oXq5YPd6%2FayiaoG%2BSt%2FhNZ%2FbudQhD6I1TvB7fjO7I%2BR9MLZSmm7cWcl5%2Fm9KrJ2UmplLWp41Co6K8xJB3Njr0GcglDrF4n%2BoEo7hcH0P4fiz5AtLlF08D6yVl6S1krInuUtRGyBwOOaeZgP09Va%2BAQ%3D%3D

X-Download-Options

Other

noopen

X-Permitted-Cross-Domain-Policies

Other

none

X-Request-Id

Other

ccc4b762-5569-4005-8556-9104419fe8d2

alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
cf-ray: 9f9306188cafae7d-IAD
date: Sat, 09 May 2026 19:13:51 GMT
link: </vite/assets/index-66f67ac1.css>; rel=preload; as=style; nopush,</vite/assets/vendor-ce74e8c0.css>; rel=preload; as=style; nopush,</vite/assets/vendor-antd-859486c1.css>; rel=preload; as=style; nopush,</vite/assets/prismic-fea5b044.css>; rel=preload; as=style; nopush,</vite/assets/components-73fee31c.css>; rel=preload; as=style; nopush,</vite/assets/vendor-castle-1f365951.css>; rel=preload; as=style; nopush,</vite/assets/externalTrustCenter-b416eda1.js>; rel=preload; as=script; crossorigin=anonymous; nopush,</vite/assets/index-66f67ac1.css>; rel=preload; as=style; nopush,</vite/assets/vendor-ce74e8c0.css>; rel=preload; as=style; nopush,</vite/assets/vendor-antd-859486c1.css>; rel=preload; as=style; nopush,</vite/assets/prismic-fea5b044.css>; rel=preload; as=style; nopush,</vite/assets/components-73fee31c.css>; rel=preload; as=style; nopush,</vite/assets/vendor-castle-1f365951.css>; rel=preload; as=style; nopush,<https://secureframe-prod.s3.us-west-2.amazonaws.com/7gd4pc45vp009fpxrsnok8tit3bb?response-content-disposition=inline%3B%20filename%3D%22custom_css_b2580fcd-c500-496a-bcc2-8e1e8ec2cb4e_17.css%22%3B%20filename%2A%3DUTF-8%27%27custom_css_b2580fcd-c500-496a-bcc2-8e1e8ec2cb4e_17.css&response-content-type=text%2Fcss&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAY4JYTU2EAYPXBEEU%2F20260509%2Fus-west-2%2Fs3%2Faws4_request&X-Amz-Date=20260509T191351Z&X-Amz-Expires=604800&X-Amz-SignedHeaders=host&X-Amz-Signature=4542c14292834ab420b082d937827ead3eb0b72dea753129bd66bb71cf8b2069>; rel=preload; as=style; nopush
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=oXq5YPd6%2FayiaoG%2BSt%2FhNZ%2FbudQhD6I1TvB7fjO7I%2BR9MLZSmm7cWcl5%2Fm9KrJ2UmplLWp41Co6K8xJB3Njr0GcglDrF4n%2BoEo7hcH0P4fiz5AtLlF08D6yVl6S1krInuUtRGyBwOOaeZgP09Va%2BAQ%3D%3D"}]}
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-request-id: ccc4b762-5569-4005-8556-9104419fe8d2

Recommendations

Enable compression (gzip/brotli) to improve performance