HTTP Headers Analysis for https://ngrok-free.dev

Detected Technologies from Headers

See all in URL Inspect 6

Ketch

Google Analytics

Google Tag Manager

HubSpot

HubSpot Analytics

PostHog

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=63072000; includeSubDomains; preload

Content-Security-Policy

Basic

script-src; base-uri; object-src; +2 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Present

camera=(), microphone=(), geolocation=()

Recommendations

• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

x-ngrok-edge, Accept

connection: close
transfer-encoding: chunked
vary: x-ngrok-edge, Accept

Caching Headers

Age

Caching

0

Cache-Control

Caching

public, max-age=0, must-revalidate

age: 0
cache-control: public, max-age=0, must-revalidate

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: __vdpl=dpl_6VH67ajqog3p5evXr9BhN29pJQVB; Path=/; HttpOnly; SameSite=Lax

Other Headers

Cdn-Cache-Control

Other

public, s-maxage=60, stale-while-revalidate=86400

Date

Other

Tue, 15 Sep 2026 03:36:17 GMT

Link

Other

URL

https://www.googletagmanager.com

rel=preconnect

URL https://assets.ngrok.com

rel=preconnect crossorigin

URL https://e.ngrok.com

rel=preconnect crossorigin

URL

https://cdn.ketchjs.com

rel=dns-prefetch

X-Debug-Has-Ngrok-Header

Other

true

X-Debug-Indexing-Blocked

Other

false

X-Debug-Is-Prod

Other

true

X-Ngrok-Edge

Other

1

X-Ngrok-We-Are-Hiring

Other

https://ngrok.com/careers

cdn-cache-control: public, s-maxage=60, stale-while-revalidate=86400
date: Tue, 15 Sep 2026 03:36:17 GMT
link: <https://www.googletagmanager.com>; rel=preconnect, <https://assets.ngrok.com>; rel=preconnect; crossorigin, <https://e.ngrok.com>; rel=preconnect; crossorigin, <https://cdn.ketchjs.com>; rel=dns-prefetch, <https://global.ketchcdn.com>; rel=dns-prefetch, <https://www.google-analytics.com>; rel=dns-prefetch, <https://assets.ngrok.com/fonts/roobert/roobert-proportional-vf.woff2>; rel=preload; as=font; type="font/woff2"; crossorigin, <https://assets.ngrok.com/fonts/family/family-regular.woff2>; rel=preload; as=font; type="font/woff2"; crossorigin, <https://assets.ngrok.com/fonts/jetbrains/jetbrainsmono-wght.woff2>; rel=preload; as=font; type="font/woff2"; crossorigin, </assets/mantle-dark-BdjafGXp.css>; rel=preload; as=style, </assets/root-BaF9SA0C.css>; rel=preload; as=style, </assets/entry.client-Diw4NwtH.js>; rel=modulepreload, </assets/jsx-runtime-DPjMxEqe.js>; rel=modulepreload, </assets/react-dom-BYcDvtd4.js>; rel=modulepreload, </assets/root-DyqewMWx.js>; rel=modulepreload, </assets/_index-Bsx_qXuX.js>; rel=modulepreload, <https://e.ngrok.com/static/array.js>; rel=preload; as=script; crossorigin
x-debug-has-ngrok-header: true
x-debug-indexing-blocked: false
x-debug-is-prod: true
x-ngrok-edge: 1
x-ngrok-we-are-hiring: https://ngrok.com/careers

Recommendations

Enable compression (gzip/brotli) to improve performance