HTTP Headers Analysis for https://lab.amplitude.com

Detected Technologies from Headers

See all in URL Inspect 21

esm.sh

Amplitude

AWS

Cloudflare CDNJS

Facebook

Google AdSense

Google Analytics

Google API JS Client

Google Conversion Tracking

Google Static File Front End

Google Sign-In

Google Tag Manager

Intercom

jsDelivr

Stripe

Wistia

Zendesk

Express

Google Cloud

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=31536000; includeSubDomains; preload;

Content-Security-Policy

Basic

report-uri; object-src; script-src; +2 more Analyze

Content-Security-Policy-Report-Only

Weak

report-uri Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Etag

Caching

W/"143f9-5ug4j8ZKcvZfK+jdZ3lkgk/y+p4"

etag: W/"143f9-5ug4j8ZKcvZfK+jdZ3lkgk/y+p4"

Content Headers

Content-Length

Content

82937

Content-Type

Content

text/html; charset=utf-8

content-length: 82937
content-type: text/html; charset=utf-8

Server Headers

X-Powered-By

Server

Express

x-powered-by: Express

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: onenav_jwt_prod=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT

Other Headers

Date

Other

Mon, 04 May 2026 08:12:02 GMT

Reporting-Endpoints

Other

default="/t/reporting/report?onenav-version=491a371d3550db5498d866efda9c304454a7672d"

X-Amzn-Trace-Id

Other

Root=1-69f854d2-3fd2f95c719776f1725cfe31

date: Mon, 04 May 2026 08:12:02 GMT
reporting-endpoints: default="/t/reporting/report?onenav-version=491a371d3550db5498d866efda9c304454a7672d"
x-amzn-trace-id: Root=1-69f854d2-3fd2f95c719776f1725cfe31

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching

Consider removing X-Powered-By header to hide server technology