HTTP Headers Analysis for https://my.apptio.com

Detected Technologies from Headers

See all in URL Inspect 3

AWS

Amazon S3

Google Fonts

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Strong

default-src; base-uri; child-src; +11 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

no-referrer-when-downgrade

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Vary

Performance

Accept-Encoding

connection: close
vary: Accept-Encoding

Caching Headers

Cache-Control

Caching

no-store, must-revalidate

Expires

Caching

0

Pragma

Caching

no-cache

cache-control: no-store, must-revalidate
expires: 0
pragma: no-cache

Content Headers

Content-Length

Content

3899

Content-Type

Content

text/html

content-length: 3899
content-type: text/html

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: FDINGRESS=ec590b2702ba5cd9eae66bb22bf83c8f|ef0cec9d6fea9cb17cfe846439168afd; Expires=Sat, 09-May-26 11:42:47 GMT; Max-Age=60; Path=/; Secure; HttpOnly; SameSite=Strict

Other Headers

Date

Other

Sat, 09 May 2026 11:41:47 GMT

Fd-Request-Id

Other

emqRV7xL

date: Sat, 09 May 2026 11:41:47 GMT
fd-request-id: emqRV7xL

Recommendations

Enable compression (gzip/brotli) to improve performance