Open
Cached
·
just now
16
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Excellent
max-age=63072000; includeSubDomains; preload
Content-Security-Policy
Good
frame-ancestors; base-uri; default-src; +11 more
frame-ancestors 'self'; base-uri 'self'; default-src 'self' https://canny.io https://*.canny.io; child-src 'self' blob: https://canny.io https://*.canny.io https://recaptcha.recaptcha.net/recaptcha/ https://www.recaptcha.net/recaptcha/ https://*.googletagmanager.com https://*.hs-sites.com https://intercom-sheets.com https://share.intercom.io https://www.intercom-reporting.com https://*.loom.com https://loom.com https://*.stripe.com https://*.vimeo.com https://vimeo.com https://*.wistia.net https://*.youtu.be https://*.youtube.com https://youtu.be https://youtube.com; connect-src 'self' https://canny.io https://*.canny.io https://cdn.jsdelivr.net/npm/@emoji-mart/[email protected]/sets/14/native.json https://edge.fullstory.com https://rs.fullstory.com https://*.analytics.google.com https://*.google-analytics.com https://*.googletagmanager.com https://api.hubapi.com https://*.hubspot.com https://*.hsappstatic.net https://*.intercom.io https://uploads.intercomcdn.com https://uploads.intercomusercontent.com wss://*.intercom.io https://cdn.linkedin.oribi.io https://px.ads.linkedin.com https://*.clarity.ms https://bat.bing.com https://api-js.mixpanel.com https://*.sentry.io https://sentry.io https://*.stripe.com https://*.wistia.com https://*.wistia.net https://*.litix.io https://embedwistia-a.akamaihd.net; font-src * data:; form-action https://canny.io https://*.canny.io https://api-iam.intercom.io https://intercom.help; img-src * data: https://canny.io https://*.canny.io https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com *.hubspot.com https://canny-assets.io; media-src * blob: data: https://canny-assets.io; object-src 'none'; script-src 'self' 'nonce-mDYEs50eArywt1e6IZ5C/Q==' https://canny.io https://*.canny.io https://edge.fullstory.com https://www.google-analytics.com https://www.recaptcha.net/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://*.googletagmanager.com https://www.googletagmanager.com https://*.hubspot.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hs-scripts.com https://js.hsadspixel.net https://js.hscollectedforms.net https://js.hsleadflows.net https://*.intercom.io https://js.intercomcdn.com https://snap.licdn.com https://*.clarity.ms https://bat.bing.com https://g.microsoft.com https://cdn.mxpnl.com https://*.sentry-cdn.com https://*.stripe.com https://*.wistia.com; style-src 'self' 'unsafe-inline' https://canny.io https://*.canny.io; worker-src blob:; report-uri https://canny.io/api/csp/report
X-Frame-Options
Good
sameorigin
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin
Permissions-Policy
Missing
Not configured
Recommendations
- • Strengthen CSP by removing 'unsafe-eval'
- • Consider adding Permissions-Policy to control browser features
Performance Headers
2 headers
Connection
Performance
close
Transfer-Encoding
Performance
chunked
Caching Headers
0 headers
No caching headers found
Content Headers
1 headers
Content-Type
Content
text/html
Server Headers
0 headers
No server headers found
CORS Headers
0 headers
No CORS headers found
Cookies Headers
1 headers
Set-Cookie
Cookies
__canny__experimentID=ab76cbcd-f9fa-53f7-e329-00a644852bbd; path=/; expires=Mon, 03 Dec 2035 00:59:06 GMT; domain=.canny.io; samesite=none; secure
Other Headers
7 headers
Alt-Svc
Other
h3=":443"; ma=86400
Date
Other
Fri, 05 Dec 2025 00:59:06 GMT
Via
Other
1.1 3500e6db5ae43764ed5ca43fc6d56058.cloudfront.net (CloudFront)
X-Amz-Cf-Id
Other
FUpvxe3KbJ9-1ajJl8GtUymdO0ght48bGZa4yOuYq9yKcvgxw3Geeg==
X-Amz-Cf-Pop
Other
IAD89-P1
X-Cache
Other
Miss from cloudfront
X-Permitted-Cross-Domain-Policies
Other
none
Recommendations
Enable compression (gzip/brotli) to improve performance
Add Cache-Control header to optimize caching
Analysis completed in 289ms