HTTP Headers Analysis for https://secure.docusign.com

Detected Technologies from Headers

See all in URL Inspect 20

Akamai

Contentful

Demandbase

DocuSign

Drift

Oracle Eloqua

Facebook

Fullstory

Google Analytics

Google Search

Google Tag Manager

Liveramp

Mixpanel

OneTrust

Optimizely

Qualtrics

Sift

StackAdapt

Next.js

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Basic

default-src; script-src; style-src; +5 more Analyze

X-Frame-Options

Excellent

deny

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Add Content-Security-Policy header to prevent XSS attacks
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close, Transfer-Encoding

Transfer-Encoding

Performance

chunked

connection: close, Transfer-Encoding
transfer-encoding: chunked

Caching Headers

Cache-Control

Caching

max-age=2889, s-maxage=86400

Etag

Caching

"4152yhy2cifmyf"

cache-control: max-age=2889, s-maxage=86400
etag: "4152yhy2cifmyf"

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: ds_a=e8ee7c76-1d91-45b9-b14f-35b989137a4a;Domain=.docusign.com;Max-Age=63072000;SameSite=None;Secure;Path=/
ecom_state=;Domain=ecom.docusign.com;Max-Age=-1;SameSite=None;Secure;Path=/

Other Headers

Akamai-Cache-Control

Other

max-age=86400, stale-while-revalidate=3600, stale-if-error=3600

Akamai-Grn

Other

0.0a53d117.1778492771.3cf149f5

Date

Other

Mon, 11 May 2026 09:46:11 GMT

Traceparent

Other

00-de170ee2e8ce82156830c155e1a02dce-a86048ea74b17623-01

X-App-Version

Other

5.0.0

X-Download-Options

Other

noopen

X-Ds-Cerberus-Buildinfo

Other

2.5.0.20260506.3

X-Ds-Cerberus-Tracetoken

Other

a9d2daf2-3906-4af8-a571-b964a9e88f4f

X-Nextjs-Cache

Other

HIT

X-Request-Id

Other

40c7963e-737d-97ee-a934-ae78a0c1f4a3

akamai-cache-control: max-age=86400, stale-while-revalidate=3600, stale-if-error=3600
akamai-grn: 0.0a53d117.1778492771.3cf149f5
date: Mon, 11 May 2026 09:46:11 GMT
traceparent: 00-de170ee2e8ce82156830c155e1a02dce-a86048ea74b17623-01
x-app-version: 5.0.0
x-download-options: noopen
x-ds-cerberus-buildinfo: 2.5.0.20260506.3
x-ds-cerberus-tracetoken: a9d2daf2-3906-4af8-a571-b964a9e88f4f
x-nextjs-cache: HIT
x-request-id: 40c7963e-737d-97ee-a934-ae78a0c1f4a3

Recommendations

Enable compression (gzip/brotli) to improve performance