HTTP Headers Analysis for https://www.dbt.com

Detected Technologies from Headers

See all in URL Inspect 24

Adobe Fonts (Typekit)

Azure Blob Storage

Bing

Facebook

Font Awesome

GitHub

Google API JS Client

Google DoubleClick

Google Search

Google Tag Manager

HubSpot

HubSpot Forms

jsDelivr

Microsoft Clarity

Mutiny

Next.js

OneTrust

Optimizely

Sanity

6sense

Vercel

Wistia

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=63072000; includeSubDomains; preload

Content-Security-Policy

Basic

img-src; style-src; script-src; +4 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Vary

Performance

rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch

connection: close
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch

Caching Headers

Age

Caching

46808

Cache-Control

Caching

public, max-age=0, must-revalidate

Etag

Caching

"63g6o6ldz4ih9w"

age: 46808
cache-control: public, max-age=0, must-revalidate
etag: "63g6o6ldz4ih9w"

Content Headers

Content-Length

Content

862279

Content-Type

Content

text/html; charset=utf-8

content-length: 862279
content-type: text/html; charset=utf-8

Server Headers

Server

Vercel

X-Powered-By

Server

Next.js

server: Vercel
x-powered-by: Next.js

CORS Headers

No CORS headers found

Cookies Headers

No cookies headers found

Other Headers

Date

Other

Tue, 05 May 2026 16:59:41 GMT

X-Matched-Path

Other

/

X-Nextjs-Prerender

Other

1

X-Nextjs-Stale-Time

Other

300

X-Vercel-Cache

Other

HIT

X-Vercel-Id

Other

iad1::iad1::pw77s-1778047190646-ca2c43e079fc

date: Tue, 05 May 2026 16:59:41 GMT
x-matched-path: /
x-nextjs-prerender: 1
x-nextjs-stale-time: 300
x-vercel-cache: HIT
x-vercel-id: iad1::iad1::pw77s-1778047190646-ca2c43e079fc

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology