HTTP Headers Analysis for https://test.workmotion.com

Detected Technologies from Headers

See all in URL Inspect 11

AWS CloudFront

AWS Active incidents

Amazon S3

Cloudflare CDNJS

GitHub

Google Cloud Storage

Google Tag Manager

Hotjar

Okta

Salesforce Cloud

Salesforce Sites

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=63072000; includeSubDomains; preload

Content-Security-Policy

Weak

frame-src; frame-ancestors; base-uri; +1 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

no-referrer

Permissions-Policy

Missing

Not configured

Recommendations

• Significantly strengthen CSP directives
• Consider adding Permissions-Policy to control browser features

Performance Headers

Accept-Ranges

Performance

bytes

Connection

Performance

close

accept-ranges: bytes
connection: close

Caching Headers

Age

Caching

500

Cache-Control

Caching

no-cache, no-store

Etag

Caching

"55f6ef88dc6e64dd814fddb9a25793a9"

Last-Modified

Caching

Tue, 07 Apr 2026 13:50:18 GMT

age: 500
cache-control: no-cache, no-store
etag: "55f6ef88dc6e64dd814fddb9a25793a9"
last-modified: Tue, 07 Apr 2026 13:50:18 GMT

Content Headers

Content-Length

Content

8072

Content-Type

Content

text/html

content-length: 8072
content-type: text/html

Server Headers

Server

AmazonS3

server: AmazonS3

CORS Headers

No CORS headers found

Cookies Headers

No cookies headers found

Other Headers

Date

Other

Mon, 11 May 2026 11:33:12 GMT

Via

Other

1.1 afd508e8725b6457725f7b20366832e6.cloudfront.net (CloudFront)

X-Amz-Cf-Id

Other

jfA73irvOPJZL3Tds1JjXDHT686K1FLP7iNjKw5Ua7WJOci8vp4sbA==

X-Amz-Cf-Pop

Other

IAD61-P9

X-Amz-Server-Side-Encryption

Other

AES256

X-Cache

Other

Hit from cloudfront

date: Mon, 11 May 2026 11:33:12 GMT
via: 1.1 afd508e8725b6457725f7b20366832e6.cloudfront.net (CloudFront)
x-amz-cf-id: jfA73irvOPJZL3Tds1JjXDHT686K1FLP7iNjKw5Ua7WJOci8vp4sbA==
x-amz-cf-pop: IAD61-P9
x-amz-server-side-encryption: AES256
x-cache: Hit from cloudfront

Recommendations

Enable compression (gzip/brotli) to improve performance