HTTP Headers Analysis for https://support.toolpath.com

Detected Technologies from Headers

See all in URL Inspect 4

Cloudflare NEL Monitoring

Cloudflare CDN

Font Awesome

HubSpot

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31536000

Content-Security-Policy

Weak

upgrade-insecure-requests Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Good

no-referrer-when-downgrade

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Significantly strengthen CSP directives
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

accept-encoding

connection: close
transfer-encoding: chunked
vary: accept-encoding

Caching Headers

Cache-Control

Caching

no-store, no-cache, must-revalidate

Last-Modified

Caching

Sun, 24 May 2026 23:26:21 GMT

cache-control: no-store, no-cache, must-revalidate
last-modified: Sun, 24 May 2026 23:26:21 GMT

Content Headers

Content-Type

Content

text/html; charset=UTF-8

content-type: text/html; charset=UTF-8

Server Headers

Server

cloudflare

server: cloudflare

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: __cf_bm=ailiK7KO_7fxat703wHsP.rDalr8syTKnj47CqdBe30-1779868845.3216634-1.0.1.1-sOeAo7TDyeTxs62yi8os2fievzyEAGZlFd5hj9XjkHo8cHA.gkEcHVV5V4mkygbpnzoGbuETZ6tw_kjmchcWX481xrgEqWZr5HVAmXQQ6kEiqmbKGfJsDhOokZtQkrY6; HttpOnly; SameSite=None; Secure; Path=/; Domain=support.toolpath.com; Expires=Wed, 27 May 2026 08:30:45 GMT
_cfuvid=t2fxS7m2SHjfzsmdEebo_3UykV8r5z1aCZmVZ08mFMo-1779868845.3216634-1.0.1.1-w4FkOnrFgb.kh0.v21ZLqKKz..cQuUZtiZY3N_cyn38; HttpOnly; SameSite=None; Secure; Path=/; Domain=support.toolpath.com

Other Headers

Alt-Svc

Other

h3=":443"; ma=86400

Cf-Ray

Other

a0237cdb4ad5fc74-IAD

Date

Other

Wed, 27 May 2026 08:00:45 GMT

Edge-Cache-Tag

Other

CT-173868798489,CG-173866936205,P-43773079,MENU-170254355498,PGS-ALL,SW-2,GC-173873775437,GC-173880119857,TS-173907759133

Link

Other

URL https://7052064.fs1.hubspotusercontent-na1.net/hubfs/7052064/hub_generated/module_assets/1/-107255593217/1779476703323/module_website-header.min.css

rel=preload as=style

URL https://7052064.fs1.hubspotusercontent-na1.net/hubfs/7052064/hub_generated/module_assets/1/-153268142413/1779476704422/module_kb-search-input.min.css

rel=preload as=style

URL https://7052064.fs1.hubspotusercontent-na1.net/hubfs/7052064/hub_generated/module_assets/1/-112598395241/1779476613824/module_kb_home_category_listing.min.css

rel=preload as=style

URL

https://kit.fontawesome.com/331a919f6f.js

rel=preload as=script

Nel

Other

Report-To Group cf-nel max-age: 1w

success: 1.0%

Report-To

Other

Group cf-nel max-age: 1w

Endpoint 1 https://a.nel.cloudflare.com/report/v4?s=afVTkWP5RA4bPblIi20Bi3jSujEbXcn1mN0cXYSRRoB989pPnk6ueuHk5wc40TVRthVPIaSo7sW7VkyptoDpcph5vy9apsjuOh7slPVESQdkSuZ5JG%2F5PIYCrEuy25pdiOtrMuiw

X-Hs-Cache-Config

Other

BrowserCache-5s-EdgeCache-0s

X-Hs-Cache-Control

Other

s-maxage=36000, max-age=0

X-Hs-Cf-Cache-Status

Other

HIT

X-Hs-Cfworker-Meta

Other

{"contentType":"KNOWLEDGE_CONTENT","resolver":"PreRenderedContentResolver"}

X-Hs-Content-Id

Other

173868798489

X-Hs-Hub-Id

Other

43773079

X-Hs-Portal-Id

Other

43773079

X-Hs-Prerendered

Other

Sun, 24 May 2026 23:26:21 GMT

alt-svc: h3=":443"; ma=86400
cf-ray: a0237cdb4ad5fc74-IAD
date: Wed, 27 May 2026 08:00:45 GMT
edge-cache-tag: CT-173868798489,CG-173866936205,P-43773079,MENU-170254355498,PGS-ALL,SW-2,GC-173873775437,GC-173880119857,TS-173907759133
link: <https://7052064.fs1.hubspotusercontent-na1.net/hubfs/7052064/hub_generated/module_assets/1/-107255593217/1779476703323/module_website-header.min.css>; rel=preload; as=style,<https://7052064.fs1.hubspotusercontent-na1.net/hubfs/7052064/hub_generated/module_assets/1/-153268142413/1779476704422/module_kb-search-input.min.css>; rel=preload; as=style,<https://7052064.fs1.hubspotusercontent-na1.net/hubfs/7052064/hub_generated/module_assets/1/-112598395241/1779476613824/module_kb_home_category_listing.min.css>; rel=preload; as=style,<https://kit.fontawesome.com/331a919f6f.js>; rel=preload; as=script
nel: {"report_to":"cf-nel","success_fraction":0.01,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=afVTkWP5RA4bPblIi20Bi3jSujEbXcn1mN0cXYSRRoB989pPnk6ueuHk5wc40TVRthVPIaSo7sW7VkyptoDpcph5vy9apsjuOh7slPVESQdkSuZ5JG%2F5PIYCrEuy25pdiOtrMuiw"}]}
x-hs-cache-config: BrowserCache-5s-EdgeCache-0s
x-hs-cache-control: s-maxage=36000, max-age=0
x-hs-cf-cache-status: HIT
x-hs-cfworker-meta: {"contentType":"KNOWLEDGE_CONTENT","resolver":"PreRenderedContentResolver"}
x-hs-content-id: 173868798489
x-hs-hub-id: 43773079
x-hs-portal-id: 43773079
x-hs-prerendered: Sun, 24 May 2026 23:26:21 GMT

Recommendations

Enable compression (gzip/brotli) to improve performance