HTTP Headers Analysis for https://getharvest.com

Open Cached · just now

26 Headers

Detected Technologies from Headers

See all in URL Inspect 5

Cloudflare NEL Monitoring

Cloudflare CDN

Google Fonts

jQuery

OneTrust

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=63072000; includeSubDomains

Content-Security-Policy

Weak

upgrade-insecure-requests Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Good

strict-origin

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Significantly strengthen CSP directives
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

Transfer-Encoding

Performance

chunked

Vary

Performance

accept-encoding

connection: close
transfer-encoding: chunked
vary: accept-encoding

Caching Headers

Cache-Control

Caching

s-maxage=36000, max-age=5

Last-Modified

Caching

Fri, 01 May 2026 06:04:01 GMT

cache-control: s-maxage=36000, max-age=5
last-modified: Fri, 01 May 2026 06:04:01 GMT

Content Headers

Content-Type

Content

text/html; charset=UTF-8

content-type: text/html; charset=UTF-8

Server Headers

Server

cloudflare

server: cloudflare

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

set-cookie: __cf_bm=3VQ9NY56y1vWQ8fxQAX4pw5BJVF7xNmoufjoMHLcGR4-1777662649.162347-1.0.1.1-M6nQFoPUq01IdgVl.OO4qmQmq0LPX8PsnNDgkgx7CQClnl1vDqP9vNDqq4WBSKe_d6QQCps5smLTH2kccNuzGK72mvd414jZVqtmCp6viPcrJbQCcLh_N._EdAFNCkO4; HttpOnly; Secure; Path=/; Domain=www.getharvest.com; Expires=Fri, 01 May 2026 19:40:49 GMT
_cfuvid=mynx2a31uFZAGxdx6UjwfGzxHjxEaeoZiniqEibBoxI-1777662649.162347-1.0.1.1-N6r6dq.P.EndIPKvAxb1M4xu469BMQ862B6jbeMCb9c; HttpOnly; SameSite=None; Secure; Path=/; Domain=www.getharvest.com

Other Headers

Alt-Svc

Other

h3=":443"; ma=86400

Cf-Ray

Other

9f5116a54b47d6e9-IAD

Date

Other

Fri, 01 May 2026 19:10:49 GMT

Edge-Cache-Tag

Other

CT-47154399011,P-19495563,CW-212009344597,CW-212009344654,E-212007983409,E-212009155596,E-212009158930,E-212009158988,E-212009159034,E-212009159216,E-212009306114,E-212009306124,E-212009306162,E-212009344771,E-212009345134,RA-212007866141,RA-212007866142,RA-212007866145,RA-212007866147,RA-212007866262,RA-212007866263,RA-212008940305,RA-212008940341,RA-212008950908,RA-212008950967,RA-212008951160,RA-212008951168,RA-212008951171,RA-212008951343,RA-212008951345,RA-212008951347,RA-212009158073,RA-212009158144,RA-212009158146,RA-212009158150,RA-212009158271,RA-212009158289,RA-212009158292,RA-212009158293,RA-212009158433,RA-212009158437,RA-212009305376,RA-212009305380,RA-212009305438,RA-212009305528,RA-212009305611,RA-212009344373,RA-212009344376,PGS-ALL,SW-1,TS-212011997346

Link

Other

URL

https://fonts.googleapis.com

rel=preconnect

URL

https://fonts.gstatic.com

rel=preconnect

URL

https://fonts.googleapis.com/css2?family=Besley:wght@400;500&display=swap

rel=preload as=style

URL https://www.getharvest.com/hubfs/hub_generated/template_assets/1/212009158930/1777578605458/template_homepage-2025.min.css

rel=preload as=style

Nel

Other

Report-To Group cf-nel max-age: 1w

success: 1.0%

Report-To

Other

Group cf-nel max-age: 1w

Endpoint 1 https://a.nel.cloudflare.com/report/v4?s=LxQctTHKF8hh0ioQC82WWVs%2B6DJKs%2FQiMmywDGvOGaFc7EzPuHU%2BvgJtxV7aMQwIaqliWK0QlRsc8dhyOPyNc5ISOrxoiezmwLB28Ingbqr4lKqbDI0QeK2%2Fo8RkK5T1zEeMJg%3D%3D

X-Hs-Cache-Config

Other

BrowserCache-5s-EdgeCache-180s

X-Hs-Cache-Control

Other

s-maxage=36000, max-age=0

X-Hs-Cf-Cache-Status

Other

HIT

X-Hs-Cfworker-Meta

Other

{"contentType":"SITE_PAGE","resolver":"PreRenderedContentResolver"}

X-Hs-Content-Id

Other

47154399011

X-Hs-Hub-Id

Other

19495563

X-Hs-Portal-Id

Other

19495563

X-Hs-Prerendered

Other

Fri, 01 May 2026 06:04:01 GMT

alt-svc: h3=":443"; ma=86400
cf-ray: 9f5116a54b47d6e9-IAD
date: Fri, 01 May 2026 19:10:49 GMT
edge-cache-tag: CT-47154399011,P-19495563,CW-212009344597,CW-212009344654,E-212007983409,E-212009155596,E-212009158930,E-212009158988,E-212009159034,E-212009159216,E-212009306114,E-212009306124,E-212009306162,E-212009344771,E-212009345134,RA-212007866141,RA-212007866142,RA-212007866145,RA-212007866147,RA-212007866262,RA-212007866263,RA-212008940305,RA-212008940341,RA-212008950908,RA-212008950967,RA-212008951160,RA-212008951168,RA-212008951171,RA-212008951343,RA-212008951345,RA-212008951347,RA-212009158073,RA-212009158144,RA-212009158146,RA-212009158150,RA-212009158271,RA-212009158289,RA-212009158292,RA-212009158293,RA-212009158433,RA-212009158437,RA-212009305376,RA-212009305380,RA-212009305438,RA-212009305528,RA-212009305611,RA-212009344373,RA-212009344376,PGS-ALL,SW-1,TS-212011997346
link: <https://fonts.googleapis.com>; rel=preconnect,<https://fonts.gstatic.com>; rel=preconnect,<https://fonts.googleapis.com/css2?family=Besley:wght@400;500&display=swap>; rel=preload; as=style,<https://www.getharvest.com/hubfs/hub_generated/template_assets/1/212009158930/1777578605458/template_homepage-2025.min.css>; rel=preload; as=style,<https://www.getharvest.com/hubfs/hub_generated/template_assets/1/212009344771/1777567599233/template_main.min.css>; rel=preload; as=style,<https://www.getharvest.com/hubfs/hub_generated/template_assets/1/212009158988/1777552760027/template_theme-overrides.min.css>; rel=preload; as=style,<https://www.getharvest.com/hubfs/hub_generated/module_assets/1/212009344597/1777615398818/module_feature-grid.min.css>; rel=preload; as=style,<//code.jquery.com/jquery-3.6.0.min.js>; rel=preload; as=script,<https://cdn.cookielaw.org/consent/7da14cd6-28e2-421a-b5f8-9eaf0352a642-test/otSDKStub.js>; rel=preload; as=script
nel: {"report_to":"cf-nel","success_fraction":0.01,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=LxQctTHKF8hh0ioQC82WWVs%2B6DJKs%2FQiMmywDGvOGaFc7EzPuHU%2BvgJtxV7aMQwIaqliWK0QlRsc8dhyOPyNc5ISOrxoiezmwLB28Ingbqr4lKqbDI0QeK2%2Fo8RkK5T1zEeMJg%3D%3D"}]}
x-hs-cache-config: BrowserCache-5s-EdgeCache-180s
x-hs-cache-control: s-maxage=36000, max-age=0
x-hs-cf-cache-status: HIT
x-hs-cfworker-meta: {"contentType":"SITE_PAGE","resolver":"PreRenderedContentResolver"}
x-hs-content-id: 47154399011
x-hs-hub-id: 19495563
x-hs-portal-id: 19495563
x-hs-prerendered: Fri, 01 May 2026 06:04:01 GMT

Recommendations

Enable compression (gzip/brotli) to improve performance