HTTP Headers Analysis for https://help.simpplr.com

Detected Technologies from Headers

See all in URL Inspect 2

Varnish

Vercel

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=63072000; includeSubDomains

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Accept-Ranges

Performance

bytes

Connection

Performance

close

accept-ranges: bytes
connection: close

Caching Headers

Age

Caching

201900

Etag

Caching

"6d9786ead00af6befb16c88d840aad3d"

Last-Modified

Caching

Tue, 05 May 2026 19:08:12 GMT

age: 201900
etag: "6d9786ead00af6befb16c88d840aad3d"
last-modified: Tue, 05 May 2026 19:08:12 GMT

Content Headers

Content-Disposition

Content

inline; filename="500"

Content-Length

Content

3476

Content-Type

Content

text/html; charset=utf-8

content-disposition: inline; filename="500"
content-length: 3476
content-type: text/html; charset=utf-8

Server Headers

Server

Vercel

server: Vercel

CORS Headers

Access-Control-Allow-Credentials

Cors

true

Access-Control-Allow-Headers

Cors

X-Devrev-Oasis-Dashboard-Token, X-Devrev-Oasis-Dashboard-Id, X-Devrev-Demo-Mode, Authorization, X-CSRF-Token, X-Requested-With, Accept, Accept-Version, Content-Type, Accept-Encoding, Content-Encoding, Content-Length, X-Requested-With, x-datadog-trace-id, x-datadog-parent-id, x-datadog-origin, x-datadog-sampling-priority, x-datadog-sampled, x-devrev-expansion, x-devrev-export-columns, x-devrev-client-frame, X-DevRev-Client-Version, X-DevRev-Client-Platform, X-DevRev-Client-ID, X-Devrev-Ml-Run-Session-Id, X-DevRev-Partition, X-DevRev-Version, x-devrev-captcha, Content-MD5, Content-Type, Date, X-Api-Version, accept-ranges, traceparent, locale, User-Agent, Cookie, X-Devrev-Dev-Org-Don, X-Devrev-Dev-User-Don, X-Devrev-Session-Id, X-Devrev-Include-Oasis-Format

Access-Control-Allow-Methods

Cors

GET, PUT, POST, PATCH, DELETE, OPTIONS

Access-Control-Allow-Origin

Cors

help.simpplr.com

Access-Control-Expose-Headers

Cors

X-Devrev-Ml-Run-Request-Id, X-Devrev-Ml-Run-Session-Id, X-Devrev-Oasis-Dashboard-Token, X-Devrev-Session-Id, X-Devrev-Include-Oasis-Format

Access-Control-Max-Age

Cors

172800

access-control-allow-credentials: true
access-control-allow-headers: X-Devrev-Oasis-Dashboard-Token, X-Devrev-Oasis-Dashboard-Id, X-Devrev-Demo-Mode, Authorization, X-CSRF-Token, X-Requested-With, Accept, Accept-Version, Content-Type, Accept-Encoding, Content-Encoding, Content-Length, X-Requested-With, x-datadog-trace-id, x-datadog-parent-id, x-datadog-origin, x-datadog-sampling-priority, x-datadog-sampled, x-devrev-expansion, x-devrev-export-columns, x-devrev-client-frame, X-DevRev-Client-Version, X-DevRev-Client-Platform, X-DevRev-Client-ID, X-Devrev-Ml-Run-Session-Id, X-DevRev-Partition, X-DevRev-Version, x-devrev-captcha, Content-MD5, Content-Type, Date, X-Api-Version, accept-ranges, traceparent, locale, User-Agent, Cookie, X-Devrev-Dev-Org-Don, X-Devrev-Dev-User-Don, X-Devrev-Session-Id, X-Devrev-Include-Oasis-Format
access-control-allow-methods: GET, PUT, POST, PATCH, DELETE, OPTIONS
access-control-allow-origin: help.simpplr.com
access-control-expose-headers: X-Devrev-Ml-Run-Request-Id, X-Devrev-Ml-Run-Session-Id, X-Devrev-Oasis-Dashboard-Token, X-Devrev-Session-Id, X-Devrev-Include-Oasis-Format
access-control-max-age: 172800

Cookies Headers

No cookies headers found

Other Headers

Alt-Svc

Other

h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

Date

Other

Fri, 08 May 2026 03:15:52 GMT

Timing-Allow-Origin

Other

*

Via

Other

1.1 varnish, 1.1 varnish, 1.1 varnish

X-Cache

Other

MISS, MISS, MISS

X-Cache-Hits

Other

0, 0, 0

X-Devrev

Other

backend=support,slug=simpplr,url="/[lang]/devrev"

X-Devrev-Cache

Other

path-to-check="/[lang]/devrev"

X-Devrev-Timing

Other

misspass=114,fetch=626285,do_stream=0,deliver=626353

X-Matched-Path

Other

/[lang]/500

X-Next-Error-Status

Other

500

X-Served-By

Other

cache-pdk-kpdk2140056-PDK, cache-pdk-kpdk2140034-PDK, cache-pdk-kpdk2140034-PDK

X-Timer

Other

S1778210152.894920,VS0,VE628

X-Vercel-Cache

Other

MISS

X-Vercel-Id

Other

cle1::g9r25-1778210152206-221c52e6e9ec

alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
date: Fri, 08 May 2026 03:15:52 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
x-cache: MISS, MISS, MISS
x-cache-hits: 0, 0, 0
x-devrev: backend=support,slug=simpplr,url="/[lang]/devrev"
x-devrev-cache: path-to-check="/[lang]/devrev"
x-devrev-timing: misspass=114,fetch=626285,do_stream=0,deliver=626353
x-matched-path: /[lang]/500
x-next-error-status: 500
x-served-by: cache-pdk-kpdk2140056-PDK, cache-pdk-kpdk2140034-PDK, cache-pdk-kpdk2140034-PDK
x-timer: S1778210152.894920,VS0,VE628
x-vercel-cache: MISS
x-vercel-id: cle1::g9r25-1778210152206-221c52e6e9ec

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching