HTTP Headers Analysis for https://id.getaccept.com

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=16070400; includeSubDomains

Content-Security-Policy

Good

default-src

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Strengthen CSP by removing 'unsafe-eval'
• Consider adding Permissions-Policy to control browser features

Performance Headers

1 headers

Connection

Performance

close

Caching Headers

1 headers

Cache-Control

Caching

private

Content Headers

2 headers

Content-Length

Content

43

Content-Type

Content

text/plain; charset=utf-8

Server Headers

0 headers

No server headers found

CORS Headers

1 headers

Access-Control-Expose-Headers

Cors

Request-Context

Cookies Headers

0 headers

No cookies headers found

Other Headers

3 headers

Date

Other

Sun, 28 Dec 2025 04:26:11 GMT

Feature-Policy

Other

accelerometer 'none'; ambient-light-sensor 'none'; camera 'none'; encrypted-media 'none'; fullscreen 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; midi 'none'; payment 'none'; speaker 'none'; sync-xhr 'none'; usb 'none'; vr 'none'; picture-in-picture 'none'; document-write 'none'; image-compression 'none'; legacy-image-formats 'none'; max-downscaling-image 'none; unsized-media 'none'; vertical-scroll 'none'; animations 'none'; autoplay 'none'; notifications 'none'; push 'none'; vibrate 'none';

Request-Context

Other

appId=cid-v1:09a3d2cc-e401-4985-b82d-5183d8e1d363

Recommendations

Enable compression (gzip/brotli) to improve performance