HTTP Headers Analysis for https://forms.monday.com

Open Cached · just now

22 Headers

Detected Technologies from Headers

See all in URL Inspect 5

AWS CloudFront

Cloudflare CDN

Cloudinary

jsDelivr

Webflow

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

Transfer-Encoding

Performance

chunked

Vary

Performance

accept-encoding

connection: close
transfer-encoding: chunked
vary: accept-encoding

Caching Headers

Age

Caching

250378

Last-Modified

Caching

Wed, 19 Aug 2026 08:07:01 GMT

age: 250378
last-modified: Wed, 19 Aug 2026 08:07:01 GMT

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

Server

cloudflare

server: cloudflare

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

set-cookie: _cfuvid=SHhXphwhcPJpCcdy1eB.gYz0BOxBFqSqbArbHRBpjeg-1787376872.7855706-1.0.1.1-EgsXRAGec4RQp2ncSk83Wf9zZ9vxOj2mkHPnLqCgQQc; HttpOnly; SameSite=None; Secure; Path=/; Domain=websitepages.monday.com
experiment_visitor_id=1787377199152; Domain=monday.com; Path=/; Max-Age=7776000;
x-webflow-ab-test={"name":"homepage-agents-sbs-tags-messaging-abc-test","variant":"new__w_homepage-agents-sbs-tags-m1"}; Domain=monday.com; Path=/; Max-Age=300;
cdn_visitor_id=01a027fb-a84c-7cd1-a856-2ab9d6648954; Domain=.monday.com; Path=/; Expires=Tue, 19 Aug 2036 05:39:59 GMT; Secure; SameSite=None
__cf_bm=tnsFvXrIihHwSrFrb8LqF5oVn93tu8H5rgNri9Akm88-1787377199.1232774-1.0.1.1-gvFbLXNv7AS1IqV3BbMelzDxTpnLYoigbUkK_Dln3HGhyb6qC3bi7rncBOaJfaJHivOuqV5d8.iFT2RijvLNtx_8wtafDeThsDkXnFc5vL7M43OKyaIOnaNDQSqFK5UeKhtSOelpuNPy2WkacUlIjA; HttpOnly; SameSite=None; Secure; Path=/; Domain=monday.com; Expires=Sat, 22 Aug 2026 06:09:59 GMT

Other Headers

Cf-Cache-Status

Other

DYNAMIC

Cf-Ray

Other

a2ef8a468e211763-IAD

Date

Other

Sat, 22 Aug 2026 05:39:59 GMT

Link

Other

URL

https://cdn.prod.website-files.com

rel=preconnect crossorigin

URL

https://cdn.prod.website-files.com/656da6fea306219773d04208/css/websitepages.shared.8a55b6099.min.css

rel=preload as=style crossorigin integrity=sha384-ilW2CZpIUDagNzBJ1EETHjEKpglYI5ZVnnVa6DL34XW5mx04NYQPH94i4i6vi8uQ

URL https://monday.com

rel=preconnect

URL

https://cdn.jsdelivr.net

rel=preconnect

Server-Timing

Other

cfCacheStatus;desc="DYNAMIC", cfEdge;dur=13,cfOrigin;dur=0,cfWorker;dur=46

Surrogate-Control

Other

max-age=2147483647

Surrogate-Key

Other

websitepages.monday.com 656da6fea306219773d04208 pageId:6a7db7282e3dcb32de5dfa73

Via

Other

1.1 173953f924b01d2a5774db1608e9de4c.cloudfront.net (CloudFront)

X-Amz-Cf-Id

Other

whHLPDpUQiPTTGDxA0VDy6hqFf700dsvF1RnB6n8t8_zr0lUkTX7jQ==

X-Amz-Cf-Pop

Other

IAD61-P11

X-Cache

Other

Hit from cloudfront

X-Lambda-Id

Other

a66694b1-562c-4305-8f4e-661bb442b240

X-Wf-Region

Other

us-east-1

cf-cache-status: DYNAMIC
cf-ray: a2ef8a468e211763-IAD
date: Sat, 22 Aug 2026 05:39:59 GMT
link: <https://cdn.prod.website-files.com>; rel=preconnect; crossorigin, <https://cdn.prod.website-files.com/656da6fea306219773d04208/css/websitepages.shared.8a55b6099.min.css>; rel=preload; as=style; crossorigin; integrity="sha384-ilW2CZpIUDagNzBJ1EETHjEKpglYI5ZVnnVa6DL34XW5mx04NYQPH94i4i6vi8uQ", <https://monday.com>; rel=preconnect, <https://cdn.jsdelivr.net>; rel=preconnect, <https://dapulse-res.cloudinary.com>; rel=preconnect, <https://d3e54v103j8qbb.cloudfront.net>; rel=preconnect, <https://monday.com/static/css/splide.min.css>; rel=preload; as=style, <https://monday.com/.well-known/api-catalog>; rel="api-catalog", <https://monday.com/.well-known/mcp.json>; rel="service-desc", <https://monday.com/.well-known/agent-skills/index.json>; rel="service-desc", <https://api.monday.com/v2/get_schema?format=sdl>; rel="describedby", <https://api.monday.com/v2/get_schema>; rel="describedby", <https://monday.com/.well-known/oauth-authorization-server>; rel="oauth-authorization-server", <https://monday.com/.well-known/oauth-protected-resource>; rel="oauth-protected-resource", <https://monday.com/.well-known/api-catalog>; rel="api-catalog", <https://monday.com/.well-known/mcp.json>; rel="service-desc", <https://monday.com/.well-known/agent-skills/index.json>; rel="service-desc", <https://api.monday.com/v2/get_schema?format=sdl>; rel="describedby", <https://api.monday.com/v2/get_schema>; rel="describedby", <https://monday.com/.well-known/oauth-authorization-server>; rel="oauth-authorization-server", <https://monday.com/.well-known/oauth-protected-resource>; rel="oauth-protected-resource"
server-timing: cfCacheStatus;desc="DYNAMIC", cfEdge;dur=13,cfOrigin;dur=0,cfWorker;dur=46
surrogate-control: max-age=2147483647
surrogate-key: websitepages.monday.com 656da6fea306219773d04208 pageId:6a7db7282e3dcb32de5dfa73
via: 1.1 173953f924b01d2a5774db1608e9de4c.cloudfront.net (CloudFront)
x-amz-cf-id: whHLPDpUQiPTTGDxA0VDy6hqFf700dsvF1RnB6n8t8_zr0lUkTX7jQ==
x-amz-cf-pop: IAD61-P11
x-cache: Hit from cloudfront
x-lambda-id: a66694b1-562c-4305-8f4e-661bb442b240
x-wf-region: us-east-1

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching