Open
Cached
·
just now
16
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Good
max-age=31536000; includeSubDomains
Content-Security-Policy
Weak
frame-ancestors; report-uri; report-to
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Present
same-origin
Permissions-Policy
Missing
Not configured
Recommendations
- • Consider adding 'preload' to HSTS for maximum security
- • Significantly strengthen CSP directives
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Consider adding Permissions-Policy to control browser features
Performance Headers
3 headers
Connection
Performance
close
Transfer-Encoding
Performance
chunked
Vary
Performance
origin,access-control-request-method,access-control-request-headers,accept-encoding
Caching Headers
0 headers
No caching headers found
Content Headers
2 headers
Content-Language
Content
en-US
Content-Type
Content
text/html;charset=UTF-8
Server Headers
1 headers
Server
Server
Apache
CORS Headers
0 headers
No CORS headers found
Cookies Headers
1 headers
Set-Cookie
Cookies
FT_LOCALES=ui:en-US:default/content:en-US:default; Path=/; Max-Age=31536000; Expires=Thu, 28 Jan 2027 08:11:43 GMT; Secure; SameSite=None
Other Headers
5 headers
Date
Other
Wed, 28 Jan 2026 08:11:43 GMT
Front
Other
front02
Ft-Called-App
Other
ft/server
Ft-Called-App-Version
Other
5.2.27:08f9169c654c7b1a80d8d542bafbea1402ee1238
Report-To
Other
{ "group": "csp-violation-endpoint", "max_age": 10886400, "endpoints": [ { "url": "https://help.precisely.com/internal/api/debug/csp-violations" } ] }
Recommendations
Enable compression (gzip/brotli) to improve performance
Add Cache-Control header to optimize caching