HTTP Headers Analysis for https://toolpath.com

Open Cached · just now

26 Headers

Detected Technologies from Headers

See all in URL Inspect 3

Cloudflare NEL Monitoring

Cloudflare CDN

HubSpot

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31536000

Content-Security-Policy

Weak

upgrade-insecure-requests Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Good

no-referrer-when-downgrade

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Significantly strengthen CSP directives
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

Transfer-Encoding

Performance

chunked

Vary

Performance

accept-encoding

connection: close
transfer-encoding: chunked
vary: accept-encoding

Caching Headers

Cache-Control

Caching

no-store, no-cache, must-revalidate

Last-Modified

Caching

Fri, 15 May 2026 23:40:29 GMT

cache-control: no-store, no-cache, must-revalidate
last-modified: Fri, 15 May 2026 23:40:29 GMT

Content Headers

Content-Type

Content

text/html; charset=UTF-8

content-type: text/html; charset=UTF-8

Server Headers

Server

cloudflare

server: cloudflare

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

set-cookie: __cf_bm=bPTLhNo6uRXHnYTXTumO3qJeFsQnetoEDn0gTR1z5iU-1779044990.660248-1.0.1.1-gDKs1u1C5tRBw._mFLNKdIy8CuF3_v7.cYiFYx1bhuEniVRq_nDB4m0WUtfhNd6QWyIngZc12K4J0a99115ujohedUivZWWNsAhnOpNmaxCLupabaIDEx5Z6OrAccFYV; HttpOnly; SameSite=None; Secure; Path=/; Domain=toolpath.com; Expires=Sun, 17 May 2026 19:39:50 GMT
_cfuvid=Bb7OEPh289fFc9qkOMuWXeyNMOcFlbO0gMfSZM0.dBo-1779044990.660248-1.0.1.1-6zyuahhY653yvDpPbqfM_AQNv5vMaJ41D5wGwT9Lcgg; HttpOnly; SameSite=None; Secure; Path=/; Domain=toolpath.com

Other Headers

Alt-Svc

Other

h3=":443"; ma=86400

Cf-Ray

Other

9fd4eb379866e619-IAD

Date

Other

Sun, 17 May 2026 19:09:50 GMT

Edge-Cache-Tag

Other

CT-199131622073,P-43773079,CW-174131945775,CW-174131945781,CW-174135404343,CW-174135404351,CW-174135410078,CW-193273005662,E-174135404168,E-174135404210,E-174135404310,E-174135404311,E-174135404312,E-174135404314,E-174135409985,E-174135409986,E-174135410006,E-174135410020,E-174135410027,E-174135410033,E-174135410038,E-174145620791,E-174151032444,E-174164630821,MENU-170254355498,PGS-ALL,SW-2,GC-174181210662,TS-174164613129

Link

Other

URL https://toolpath.com/hubfs/hub_generated/template_assets/1/174135410020/1777328353278/template_main-head.min.css

rel=preload as=style

URL https://toolpath.com/hubfs/hub_generated/template_assets/1/174135404310/1777328356859/template_main-foot.min.css

rel=preload as=style

URL https://toolpath.com/hubfs/hub_generated/template_assets/1/174145620791/1764282221678/template_child.min.css

rel=preload as=style

URL https://toolpath.com/hubfs/hub_generated/template_assets/1/174135404311/1777328359199/template_clean-foundation.min.css

rel=preload as=style

Nel

Other

Report-To Group cf-nel max-age: 1w

success: 1.0%

Report-To

Other

Group cf-nel max-age: 1w

Endpoint 1 https://a.nel.cloudflare.com/report/v4?s=7B4fDe9N4Y%2B7r%2BWoDc5mP0RJblkr4%2FYKm%2F7g2E3b4F4kdVvJgHLbI6Xo%2BkOe0HiRJT7YowqVeeOHdK0aQBlRminc9n7s8KgK%2BfzoJJb8%2BO1LPiJOg16eFrgHZG6nUQ%3D%3D

X-Hs-Cache-Config

Other

BrowserCache-5s-EdgeCache-0s

X-Hs-Cache-Control

Other

s-maxage=36000, max-age=0

X-Hs-Cf-Cache-Status

Other

HIT

X-Hs-Cfworker-Meta

Other

{"contentType":"SITE_PAGE","resolver":"PreRenderedContentResolver"}

X-Hs-Content-Id

Other

199131622073

X-Hs-Hub-Id

Other

43773079

X-Hs-Portal-Id

Other

43773079

X-Hs-Prerendered

Other

Fri, 15 May 2026 23:40:29 GMT

alt-svc: h3=":443"; ma=86400
cf-ray: 9fd4eb379866e619-IAD
date: Sun, 17 May 2026 19:09:50 GMT
edge-cache-tag: CT-199131622073,P-43773079,CW-174131945775,CW-174131945781,CW-174135404343,CW-174135404351,CW-174135410078,CW-193273005662,E-174135404168,E-174135404210,E-174135404310,E-174135404311,E-174135404312,E-174135404314,E-174135409985,E-174135409986,E-174135410006,E-174135410020,E-174135410027,E-174135410033,E-174135410038,E-174145620791,E-174151032444,E-174164630821,MENU-170254355498,PGS-ALL,SW-2,GC-174181210662,TS-174164613129
link: <https://toolpath.com/hubfs/hub_generated/template_assets/1/174135410020/1777328353278/template_main-head.min.css>; rel=preload; as=style,<https://toolpath.com/hubfs/hub_generated/template_assets/1/174135404310/1777328356859/template_main-foot.min.css>; rel=preload; as=style,<https://toolpath.com/hubfs/hub_generated/template_assets/1/174145620791/1764282221678/template_child.min.css>; rel=preload; as=style,<https://toolpath.com/hubfs/hub_generated/template_assets/1/174135404311/1777328359199/template_clean-foundation.min.css>; rel=preload; as=style,<https://toolpath.com/hubfs/hub_generated/module_assets/1/174135404351/1777328341996/module_CLEAN_Pro_-_Magic_Module.css>; rel=preload; as=style,<https://7052064.fs1.hubspotusercontent-na1.net/hubfs/7052064/hub_generated/module_assets/1/-35056501883/1778865834553/module_video.min.css>; rel=preload; as=style
nel: {"report_to":"cf-nel","success_fraction":0.01,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=7B4fDe9N4Y%2B7r%2BWoDc5mP0RJblkr4%2FYKm%2F7g2E3b4F4kdVvJgHLbI6Xo%2BkOe0HiRJT7YowqVeeOHdK0aQBlRminc9n7s8KgK%2BfzoJJb8%2BO1LPiJOg16eFrgHZG6nUQ%3D%3D"}]}
x-hs-cache-config: BrowserCache-5s-EdgeCache-0s
x-hs-cache-control: s-maxage=36000, max-age=0
x-hs-cf-cache-status: HIT
x-hs-cfworker-meta: {"contentType":"SITE_PAGE","resolver":"PreRenderedContentResolver"}
x-hs-content-id: 199131622073
x-hs-hub-id: 43773079
x-hs-portal-id: 43773079
x-hs-prerendered: Fri, 15 May 2026 23:40:29 GMT

Recommendations

Enable compression (gzip/brotli) to improve performance