HTTP Headers Analysis for https://umbraco.com

Detected Technologies from Headers

See all in URL Inspect 22

Microsoft ASP.NET CDN

Calendly

Cloudflare CDN

Cookiebot

Facebook

G2

Google Analytics

Google API JS Client

Google DoubleClick

Google Fonts

Google Maps

Google Search

Google Static File Front End

Google Tag Manager

Intercom

Matomo

Navattic

Vimeo

Wistia

YouTube

Google Cloud

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=31536000; includeSubDomains; preload

Content-Security-Policy

Good

default-src; script-src; style-src; +9 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

no-referrer-when-downgrade

Permissions-Policy

Present

accelerometer=(), autoplay=(), camera=(); +26 more

Recommendations

• Strengthen CSP by removing 'unsafe-eval'

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

Accept-Encoding

connection: close
transfer-encoding: chunked
vary: Accept-Encoding

Caching Headers

No caching headers found

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

Server

cloudflare

server: cloudflare

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: __cf_bm=nqyNgnpLqy9U35FbNYjwK0YBlnDY3cquuKFuhVgrQVQ-1772030683-1.0.1.1-tLywC2o81SnSWb9RJ6Jafiq_Hjhnu8yskQ5hl.PhPT4OxKLD_0pwwKkUzJt9TI6OPaHaigi8aqLKBt_MAnIzb8FPVKsfR5iaVxEkr4YDkLo; path=/; expires=Wed, 25-Feb-26 15:14:43 GMT; domain=.umbraco.com; HttpOnly; Secure; SameSite=None

Other Headers

Alt-Svc

Other

h3=":443"; ma=86400

Cf-Cache-Status

Other

DYNAMIC

Cf-Ray

Other

9d37fb764e3d3b83-IAD

Date

Other

Wed, 25 Feb 2026 14:44:43 GMT

alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
cf-ray: 9d37fb764e3d3b83-IAD
date: Wed, 25 Feb 2026 14:44:43 GMT

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching