25 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31536000
Content-Security-Policy
Weak
upgrade-insecure-requests
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Good
no-referrer-when-downgrade
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Significantly strengthen CSP directives
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Consider adding Permissions-Policy to control browser features

Performance Headers

2 headers
Connection
Performance
keep-alive
Transfer-Encoding
Performance
chunked

Caching Headers

2 headers
Cache-Control
Caching
s-maxage=36000, max-age=5
Last-Modified
Caching
Fri, 07 Nov 2025 06:56:14 GMT

Content Headers

1 headers
Content-Type
Content
text/html; charset=UTF-8

Server Headers

1 headers
Server
Server
cloudflare

CORS Headers

0 headers
No CORS headers found

Cookies Headers

1 headers
Set-Cookie
Cookies
_cfuvid=zCahd_n6ZEaK.5Y3kyZD7fy9ovDSJpLLkLH0w2CtskI-1763019200977-0.0.1.1-604800000; path=/; domain=.www.northpass.com; HttpOnly; Secure; SameSite=None

Other Headers

15 headers
Alt-Svc
Other
h3=":443"; ma=86400
Cf-Ray
Other
99dc9495680a2fdf-IAD
Date
Other
Thu, 13 Nov 2025 07:33:20 GMT
Edge-Cache-Tag
Other
CT-57983884887,P-392014,L-66877752083,W-1649959967753,W-1649961007183,W-1649961454313,W-1664957136926,W-1668003916153,W-1680637441876,W-1683716665158,W-1683716697473,W-1683716764977,W-1683722890576,W-1683727020956,W-1683727246459,W-1683895391181,W-1687285037093,W-1687285133493,W-62441171585,W-62444909691,W-71117270849,W-71117270850,CW-110191796609,CW-197920661127,CW-60285556067,CW-63056759181,CW-63435481260,CW-63435921313,CW-66016439048,CW-69089287424,CW-69661751930,CW-69687642653,CW-69942424909,CW-70534153535,CW-70736056441,CW-74114804553,CW-74493236837,CW-85553017218,CW-90609873011,DB-5386826,DB-5386845,E-61467763318,MENU-18125532186,MENU-62441171585,MENU-62444909691,PGS-ALL,SW-1,GC-197936132097,GC-63057947267,GC-69663060400,GC-70735370874,GC-88869374130
Link
Other
<https://www.northpass.com/hubfs/hub_generated/module_assets/1/197920661127/1761070933895/module_NP-Announcement-Transition_-_Login_Modal_Global.min.css>; rel=preload; as=style,<https://www.northpass.com/hubfs/hub_generated/module_assets/1/70736056441/1742443803622/module_NP-Announcement-Banner-Global.min.css>; rel=preload; as=style,<https://www.northpass.com/hubfs/hub_generated/module_assets/1/60285556067/1742443758332/module_NP-Header.min.css>; rel=preload; as=style,<https://www.northpass.com/hubfs/hub_generated/module_assets/1/70534153535/1742443802528/module_NP-Hero-Large.min.css>; rel=preload; as=style,<https://www.northpass.com/hubfs/hub_generated/module_assets/1/63435921313/1742443768237/module_NP-Customer-Logos-Banner.min.css>; rel=preload; as=style,<https://www.northpass.com/hubfs/hub_generated/module_assets/1/85553017218/1742443836431/module_NP-Cards-Basic.min.css>; rel=preload; as=style
Nel
Other
{"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Report-To
Other
{"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GD1CWJEogtoGUV70DLYuSRIQX1miAP1xA0iYwSYOHlsB3okwm%2BWioQinMF58x9UBUmQ%2FXf4r%2B%2BeSP6wsVoD5WgoVrOzZZf33q8P4I04fMvzjyZ9URbTxOck29sfFxnK340F2"}],"group":"cf-nel","max_age":604800}
X-Hs-Cache-Config
Other
BrowserCache-5s-EdgeCache-5s
X-Hs-Cache-Control
Other
s-maxage=36000, max-age=0
X-Hs-Cf-Cache-Status
Other
HIT
X-Hs-Cfworker-Meta
Other
{"contentType":"SITE_PAGE","resolver":"PreRenderedContentResolver"}
X-Hs-Content-Id
Other
57983884887
X-Hs-Hub-Id
Other
392014
X-Hs-Portal-Id
Other
392014
X-Hs-Prerendered
Other
Fri, 07 Nov 2025 06:56:14 GMT

Recommendations

Enable compression (gzip/brotli) to improve performance

Analysis completed in 252ms