HTTP Headers Analysis for https://essentials.copado.com

Detected Technologies from Headers

See all in URL Inspect 6

Google Analytics

Google Fonts

Google Search

Google Tag Manager

jsDelivr

Nginx

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000 ; includeSubDomains

Content-Security-Policy

Basic

default-src; img-src; script-src-elem; +6 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Accept-Ranges

Performance

bytes

Connection

Performance

close

Vary

Performance

origin,access-control-request-method,access-control-request-headers,accept-encoding

accept-ranges: bytes
connection: close
vary: origin,access-control-request-method,access-control-request-headers,accept-encoding

Caching Headers

Cache-Control

Caching

no-cache, no-store, max-age=0, must-revalidate

Expires

Caching

0

Last-Modified

Caching

Tue, 28 Apr 2026 05:58:09 GMT

Pragma

Caching

no-cache

cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: 0
last-modified: Tue, 28 Apr 2026 05:58:09 GMT
pragma: no-cache

Content Headers

Content-Length

Content

22473

Content-Type

Content

text/html

content-length: 22473
content-type: text/html

Server Headers

Server

nginx

server: nginx

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: AWSALB=5hAF5W2lHgoox6QAb/a+/+HYyz0OcannOK/XhNqsfdaW1xichuSqeywncs1QeO1lZmZ1g6fWOeMPxl3uaBuhzB/IAB9rDCpqW/cQnPy0OoGs1utWJRUZQFYfU7cZ; Expires=Sat, 09 May 2026 23:00:07 GMT; Path=/
AWSALBCORS=5hAF5W2lHgoox6QAb/a+/+HYyz0OcannOK/XhNqsfdaW1xichuSqeywncs1QeO1lZmZ1g6fWOeMPxl3uaBuhzB/IAB9rDCpqW/cQnPy0OoGs1utWJRUZQFYfU7cZ; Expires=Sat, 09 May 2026 23:00:07 GMT; Path=/; SameSite=None; Secure
XSRF-TOKEN=567177ec-82f9-4b36-84e5-9f62ea49b40b; Path=/; Secure

Other Headers

Date

Other

Sat, 02 May 2026 23:00:07 GMT

date: Sat, 02 May 2026 23:00:07 GMT

Recommendations

Enable compression (gzip/brotli) to improve performance