HTTP Headers Analysis for https://janeapp.com

Detected Technologies from Headers

See all in URL Inspect 1

Cloudflare CDN

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=63072000; includeSubDomains

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Add Content-Security-Policy header to prevent XSS attacks
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

Accept-Encoding

connection: close
transfer-encoding: chunked
vary: Accept-Encoding

Caching Headers

Cache-Control

Caching

max-age=0, private, must-revalidate

cache-control: max-age=0, private, must-revalidate

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

Server

cloudflare

X-Runtime

Server

0.232093

server: cloudflare
x-runtime: 0.232093

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: visitor_id=292ded80-d916-4dd0-9122-7eaa1bb32030; domain=.jane.app; path=/; expires=Wed, 18 Aug 2027 11:44:24 GMT; secure; SameSite=Lax
_jane_web_session=%2Fmnl2jiTijITX%2BXoQiVzMQMyN5F9zmuh7EBmHwwRFhZ7I7Kjr5eZ8qKjc1fyj0Pr6PuBgSDP16dvHaRAhPtoqSz7%2FOrM7ArMM23In%2FJ4kyHEX4iNW%2FDkq9PrvV3ppAUw6gW4vNS8B3CKfgt%2BNW78wOdxt4OCVAT7bP21FpqDmYuLYMspOGNIRjtA1HqLDzuOvAKI8%2Blc0%2FO6XgkUHWriK%2Fi2d5f2kJnlFbxl%2Fatc4or0i9nNu5d67W4SWObn9PCx21YHuu49D6NP6sCY10P9GCW1ZJBFsyhht9j7w%2B2i1iHf5nuecSXGXeg%2FBOw7cXvUct1Ds17b9R3IzajPKSpggQq%2BIF5fcA12KweZyQgxDJykQyN3mxBH0q6L2itXAvTarSf7spEdNrNOyZQPMrMMCgVJzqzgSJFc2uCtqQbAwrCvCKwMuaP1tCET92deMXw8YX4Xg1ukLude9aYmzibOkdhg0sQPZFpPHxZ6RL1PZZj6nyfumV6LJKgKK1fONteb%2BwWe5BU8NHj9XoU3%2FLGkF0jbyyHFUH4zgvm%2FNzWKRLBC1LG%2B42NIPM7KVmT8eKc9mUlAdYL0m%2BvtTxdCWyESVouCgzsA3sYQIX6ftMubKKRbAY8aq54R%2FoOa1%2FBnfj7Lwds0%2FheDBJoElVIW2w%3D%3D--ivdJDjBsKv1Jim%2Ft--AHQLnBvtH2dvPaH9wkYLmg%3D%3D; path=/; secure; HttpOnly; SameSite=Lax

Other Headers

Alt-Svc

Other

h3=":443"; ma=86400

Cf-Cache-Status

Other

DYNAMIC

Cf-Ray

Other

a2d0aa95be4e5d13-IAD

Date

Other

Tue, 18 Aug 2026 11:44:24 GMT

Link

Other

URL /assets/application-761bc03c1ac90c72217e7744b6d1d81a23c61fb463c386837b7d680cd75abec1.css

rel=preload as=style nopush

URL /assets/cms_globals-8ca51ab47f9cb3ae058fbd560720176b2051bb3e600d49b29617f6b4081ebffe.js

rel=preload as=script nopush

URL /sitemap.xml

rel=sitemap

URL /legal/privacy-notice

rel=privacy-policy

Server-Timing

Other

cfCacheStatus;desc="DYNAMIC", cfEdge;dur=14,cfOrigin;dur=0,cfWorker;dur=327

X-Cache

Other

miss

X-Download-Options

Other

noopen

X-Permitted-Cross-Domain-Policies

Other

none

X-Request-Id

Other

bfaca058-831d-4ca8-8565-2ebc5d21779f

alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
cf-ray: a2d0aa95be4e5d13-IAD
date: Tue, 18 Aug 2026 11:44:24 GMT
link: </assets/application-761bc03c1ac90c72217e7744b6d1d81a23c61fb463c386837b7d680cd75abec1.css>; rel=preload; as=style; nopush,</assets/cms_globals-8ca51ab47f9cb3ae058fbd560720176b2051bb3e600d49b29617f6b4081ebffe.js>; rel=preload; as=script; nopush, </sitemap.xml>; rel="sitemap", </legal/privacy-notice>; rel="privacy-policy", </legal/terms-of-use>; rel="terms-of-service", </guide>; rel="help"
server-timing: cfCacheStatus;desc="DYNAMIC", cfEdge;dur=14,cfOrigin;dur=0,cfWorker;dur=327
x-cache: miss
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-request-id: bfaca058-831d-4ca8-8565-2ebc5d21779f

Recommendations

Enable compression (gzip/brotli) to improve performance