HTTP Headers Analysis for https://sphere-secnum.osc-secnum-fr1.scalingo.io

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=63072000; includeSubDomains

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Basic

default-src; font-src; img-src; +10 more Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

max-age=0, private, must-revalidate

Etag

Caching

W/"461a1553c43df8e14dd0306732ecaf7c"

cache-control: max-age=0, private, must-revalidate
etag: W/"461a1553c43df8e14dd0306732ecaf7c"

Content Headers

Content-Length

Content

104300

Content-Type

Content

text/html; charset=utf-8

content-length: 104300
content-type: text/html; charset=utf-8

Server Headers

X-Runtime

Server

0.038412

x-runtime: 0.038412

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: ahoy_visitor=2128b104-ebe7-4fdd-a237-365b3bd02a7e; path=/; expires=Wed, 26 Apr 2028 02:02:54 GMT; SameSite=Lax; secure
ahoy_visit=c7cf3757-912e-4d54-81a6-0bfcdda4d420; path=/; expires=Sun, 26 Apr 2026 06:02:54 GMT; SameSite=Lax; secure
_safebrain_session=hJ9Htu7uyjjAJ80UfG3IdKdJEGV%2BvXHwQAP4OWFa9MTSJZCW1Mw4EV7QxlYMw8K%2F6aspv6O6lEPBiqafhO%2BfOUIKo1kHiWR7gr3IJogYb7p3GsL%2FNj2XFrn0png7sonEwLDuyLVu%2B7RAynybuAbLoSKSpDi6mlae0HRjTNz%2BkKnOVkUxZFgc9nLNibR%2Fvlg1p%2BdlJagKnX6j1XXF1UkNESqpKvrZdQn3g5fZbrQdNvPFLN64I4xMNUJpZHfZFoG8segnZJ22ktVcCepDeSH7lBjQSQl%2B9pS0xzzlAikZQUYJrNYBa9v722vvRQsRuUlN--%2BGffBwq%2BRtdF9M%2BZ--FPvMLd0DkzwCv4%2BiQG4mUg%3D%3D; path=/; expires=Tue, 26 May 2026 02:02:54 GMT; secure; HttpOnly; SameSite=None

Other Headers

Date

Other

Sun, 26 Apr 2026 02:02:54 GMT

Link

Other

URL /assets/tailwind-31a2b36bc0b6963f3f613740b27bf8e8d50d0ac01d88b5c08b8637136ef52a33.css

rel=preload as=style nopush