Open
Cached
·
just now
13
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31536000
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
Performance Headers
Connection
close
connection: close
Caching Headers
Cache-Control
must-revalidate
cache-control: must-revalidate
Content Headers
Content-Length
275
Content-Type
application/json
content-length: 275 content-type: application/json
Server Headers
Server
Cloudant
server: Cloudant
CORS Headers
No CORS headers found
Cookies Headers
Other Headers
Date
Mon, 24 Aug 2026 21:43:36 GMT
Via
1.1 lb3.bigblue (Glum)
X-Cloudant-Action
cloudantnosqldb.account-meta-info.read
X-Cloudant-Backend
bigblue
X-Cloudant-Request-Class
unlimited
X-Couch-Request-Id
de839e17-c880-440a-a090-7efd8c58c313
date: Mon, 24 Aug 2026 21:43:36 GMT via: 1.1 lb3.bigblue (Glum) x-cloudant-action: cloudantnosqldb.account-meta-info.read x-cloudant-backend: bigblue x-cloudant-request-class: unlimited x-couch-request-id: de839e17-c880-440a-a090-7efd8c58c313
Recommendations
Enable compression (gzip/brotli) to improve performance