Open
Cached
·
just now
16
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Good
max-age=63072000; includeSubDomains
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Present
ALLOW-ALL
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
- • Consider adding 'preload' to HSTS for maximum security
- • Add Content-Security-Policy header to prevent XSS attacks
- • Consider adding Permissions-Policy to control browser features
Performance Headers
1 headers
Connection
Performance
close
Caching Headers
2 headers
Cache-Control
Caching
max-age=0, private, must-revalidate
Etag
Caching
W/"0391aadbbeeba28d2c8db94748d07b6e"
Content Headers
2 headers
Content-Length
Content
11813
Content-Type
Content
text/html; charset=utf-8
Server Headers
1 headers
X-Runtime
Server
1.610352
CORS Headers
0 headers
No CORS headers found
Cookies Headers
1 headers
Set-Cookie
Cookies
_sirportly_session=tn3CIQUwuAW6DXz6hWm%2BD0roULzjgvS352%2BUmFWBGLl5dJ2%2Fr88%2BtZ5By0ti%2FKC3lZ9r60RmTyAYRLggTxa74ZCCIHPetDaBzbusdBbBqGxuRiIYFEs1l3dzFRZOAWnKsEFSXvojLPA22Cvz3Njtc01p5Vt8ImTSv9gFAdDBNLNK0OaQMbxMTMoiItkWh5B%2BQOJvO7cMaYiZibZaBtqktUuIqLiqPBShUcsYcsFkYjj%2BPS0mFtT%2BGf3TfQbbZU1s%2BvFdb87aaIhhdRKRAQ7mJ%2BkIDT2QjP%2FaF8E%3D--JQDxgHPRFKNTW1YY--%2FaumpRd5%2BqnStHs5hqdi1A%3D%3D; domain=.codebasehq.com; path=/; secure; HttpOnly; SameSite=Lax
Other Headers
4 headers
Date
Other
Mon, 29 Dec 2025 10:25:55 GMT
X-Download-Options
Other
noopen
X-Permitted-Cross-Domain-Policies
Other
none
X-Request-Id
Other
e6a3cfc6-3e9a-4450-9bed-5185d33f7d4d
Recommendations
Enable compression (gzip/brotli) to improve performance
Analysis completed in 3429ms