HTTP Headers Analysis for https://upthere.com

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=31536000; includeSubDomains; preload

Content-Security-Policy

Weak

frame-ancestors Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Significantly strengthen CSP directives
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Vary

Performance

Accept-Encoding

connection: close
vary: Accept-Encoding

Caching Headers

Cache-Control

Caching

no-cache, no-store

Expires

Caching

-1

Pragma

Caching

no-cache

cache-control: no-cache, no-store
expires: -1
pragma: no-cache

Content Headers

Content-Length

Content

38578

Content-Type

Content

text/html;charset=utf-8

content-length: 38578
content-type: text/html;charset=utf-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: cp_session=fUtKOCzNiZF8QRwrCslx5clJohwNOqpVVXOUjZlhKu46wQF6EUhF~6r2oENh10xUKQ8uodir8PeRCR2Lp3SoOzqY4rdPVpfaGqQvogAGrJJ9gju3zgMw7XiwW8r5LUbF0mm5hM~mdnOgCdkzTmdymT6kWq7s2iiYr89zrE1D~XxVZkmOIuQdz61FqlxEhq1Hg7iSRu~qF_Zbcobl786xt6_EGZf4Uw2zyeMF9kD6h5jyb1ODmgIE0Eh3EjX5qlIhkF1tGQ_VZPAT9wguAski1L1dgM4WE7CW0TnfrpM0gk3IpoNaYW9oCUJvL29kqBXKwT0z5XdiKF4cexA3sUHXCnQoHAeDayqwyJSy~TGc5q75Bx~SxKhav_xpJ7kzdbMiCBd_AN9dQwadNDBEH6O5MAsIzEP2RlxlAIyejvoEJKhKa_WbuEB_5jhaBWULhdL7gbAs5A6rautR1QTJWtZTFb4KR6rzFIyjPVntbNRN1eqAX1p~CapA1fwOsf8ScnVhTn0dmZcYWW5CpuMk_n1oYdYJUEYrpwIKk8; path=/; httponly; SameSite=None; Secure

Other Headers

Date

Other

Mon, 11 May 2026 16:33:14 GMT

Rnt-Gk-Machine

Other

0.216

Rnt-Jn-Ext-Machine

Other

43.2

Rnt-Jn-Ext-Uuid

Other

a912dc2a-0d93-4667-997a-36281a596de0

Rnt-Jn-Int-Machine

Other

42.3

Rnt-Jn-Int-Uuid

Other

bef414bc-4f19-4d8c-bd1d-94d44485cbe3

Rnt-Machine

Other

1.150

Rnt-Time

Other

D=332090 t=1778517194583110

X-Content-Security-Policy

Other

frame-ancestors DENY

date: Mon, 11 May 2026 16:33:14 GMT
rnt-gk-machine: 0.216
rnt-jn-ext-machine: 43.2
rnt-jn-ext-uuid: a912dc2a-0d93-4667-997a-36281a596de0
rnt-jn-int-machine: 42.3
rnt-jn-int-uuid: bef414bc-4f19-4d8c-bd1d-94d44485cbe3
rnt-machine: 1.150
rnt-time: D=332090 t=1778517194583110
x-content-security-policy: frame-ancestors DENY

Recommendations

Enable compression (gzip/brotli) to improve performance