19 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Good
max-age=31536000; includeSubDomains always
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Consider adding 'preload' to HSTS for maximum security
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

Performance Headers

2 headers
Connection
Performance
keep-alive
Vary
Performance
origin

Caching Headers

3 headers
Cache-Control
Caching
no-cache, no-store, must-revalidate
Expires
Caching
Sat, 01 Jan 2000 00:00:00 GMT
Pragma
Caching
no-cache

Content Headers

2 headers
Content-Length
Content
690
Content-Type
Content
text/html;charset=UTF-8

Server Headers

0 headers
No server headers found

CORS Headers

0 headers
No CORS headers found

Cookies Headers

1 headers
Set-Cookie
Cookies
ORA_OCIS_REQ_3=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~TNlvUnysHuGv3PLdyQ+yMY1eF/Mq78exy9Ap5++gU5I;Version=1;Path=/;Secure;HttpOnly;SameSite=None

Other Headers

8 headers
Date
Other
Mon, 03 Nov 2025 10:31:35 GMT
Opc-Request-Id
Other
4423BA0E95EEF536CD1CA530D91C47FB/9PqWG05wv20000000
Opc-Total-Items
Other
1
Via
Other
1.1 net-idcs-config
X-Envoy-Decorator-Operation
Other
webtier.idcs-data-plane.svc.cluster.local:8990/*
X-Envoy-Upstream-Service-Time
Other
20
X-Oracle-Dms-Ecid
Other
4423BA0E95EEF536CD1CA530D91C47FB/9PqWG05wv20000000
X-Oracle-Dms-Rid
Other
0:1

Recommendations

Enable compression (gzip/brotli) to improve performance

Analysis completed in 1404ms