HTTP Headers Analysis for https://projects.xero.com

Detected Technologies from Headers

See all in URL Inspect 2

Akamai

Amazon S3

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

sameorigin

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close, Transfer-Encoding

Transfer-Encoding

Performance

chunked

connection: close, Transfer-Encoding
transfer-encoding: chunked

Caching Headers

Cache-Control

Caching

max-age=287

Etag

Caching

"c42c54db3eeec3a1bd5c1eca728d64de"

Expires

Caching

Mon, 11 May 2026 22:07:25 GMT

Last-Modified

Caching

Tue, 05 May 2026 22:58:49 GMT

cache-control: max-age=287
etag: "c42c54db3eeec3a1bd5c1eca728d64de"
expires: Mon, 11 May 2026 22:07:25 GMT
last-modified: Tue, 05 May 2026 22:58:49 GMT

Content Headers

Content-Type

Content

text/html

content-type: text/html

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: _abck=8B857FB60140101064EF7AA6DE8BE69C~-1~YAAQ1GncF/ovuBCeAQAA+EgQGQ/JCo253uGHyHv/dMJFEL85rO0yD0nEPMbBb3Pd9BgOt5GbJSkeRVUs9BX6TOVUdVW0/Ra13aTvwI1CTmq+CXmySz2f+qEhT7k6SYFBSAabzzWjEY39AVDJ+YclN4//1gjhTwrkwKqT+fzUiIaMfjTLAa9EyroAe79NxkW1MG17cZr7VxSI/upwLJUJ2VgaKz6yIU/91xHmrmg/fE27BdLP9FLiVJy4fqkW5KhPWOfffYf2OV5P4mEhUuluABthrmMTPmg89wjW/8cj+0mxRezcawbd1obkKVOvnG4x51RHF09ZwkaxQuZhFQYmBRGruf2UtIr6FMgOnQGhBQysthvqWdeYna5ZyZMgdI/5PYD0uXtyNMa1kQK1jV/+n047rc8Pzmn8ZgGHRIIoJcIP+TqSNE/RP4qnloU/EXpY93Vu~-1~-1~-1~-1~-1; Domain=.xero.com; Path=/; Expires=Tue, 11 May 2027 22:02:38 GMT; Max-Age=31536000; SameSite=None; Secure
bm_sz=70C6A5948560A9B63AB5787B3C1C8C20~YAAQ1GncF/svuBCeAQAA+EgQGR+g/4xBZrmZ2Iaxf/gvlu4lHIKDNwuWIiiv2/7On6eUfjXdDEolrU4iejfXsXhEzUGt5PkPGJd8Sr/neQqXDUhqV+CGK/X1nIFu6WD0ZBZkza4CcJkRJJxv2QxsIo3ljbLkE2N5XpkAZxd+IjGy5Ma4IuvDrnHtDvhxHktFdiq75Mg+t+Q+v/d5Tzv+VZXDnaGEPZTe0GoZbLw64NtQt9bn2gopyA3dV4/gysqZUcR1rd3LxkiK1AJo3ldE4pSxK+VSMEVb90OATHrbbyf7F+7EUtYyABOVzbuRvMhkuw9dGI58iqaBw0g2tmH0wgzUPbb/tMwsaC+s+A==~3748917~3622197; Domain=.xero.com; Path=/; Expires=Tue, 12 May 2026 02:02:38 GMT; Max-Age=14400; SameSite=None; Secure

Other Headers

Akamai-Grn

Other

0.d469dc17.1778536958.121b4782

Date

Other

Mon, 11 May 2026 22:02:38 GMT

X-Akamai-Transformed

Other

0 - 0 -

X-Amz-Id-2

Other

xEEwi5ZyTK5YfGM5cDdbVt4+wKIN5IhtD65+IJcTO7ZVxTZ0tqx04I13Uwco59AMAT+dBEwcmT8uwZgRKal+L51ds4qQ7usP

X-Amz-Replication-Status

Other

COMPLETED

X-Amz-Request-Id

Other

EK640QBN9XSSBSMX

X-Amz-Server-Side-Encryption

Other

AES256

X-Amz-Version-Id

Other

Q_IG_70NYtQuMUJtM744x4_QvLCEMwPC

X-Client-Ip

Other

45980

akamai-grn: 0.d469dc17.1778536958.121b4782
date: Mon, 11 May 2026 22:02:38 GMT
x-akamai-transformed: 0 - 0 -
x-amz-id-2: xEEwi5ZyTK5YfGM5cDdbVt4+wKIN5IhtD65+IJcTO7ZVxTZ0tqx04I13Uwco59AMAT+dBEwcmT8uwZgRKal+L51ds4qQ7usP
x-amz-replication-status: COMPLETED
x-amz-request-id: EK640QBN9XSSBSMX
x-amz-server-side-encryption: AES256
x-amz-version-id: Q_IG_70NYtQuMUJtM744x4_QvLCEMwPC
x-client-ip: 45980

Recommendations

Enable compression (gzip/brotli) to improve performance