HTTP Headers Analysis for https://www.expensepoint.com

Open Cached · just now

26 Headers

Detected Technologies from Headers

See all in URL Inspect 3

Cloudflare NEL Monitoring

Cloudflare CDN

unpkg

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31536000

Content-Security-Policy

Weak

upgrade-insecure-requests Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Good

no-referrer-when-downgrade

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Significantly strengthen CSP directives
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

Transfer-Encoding

Performance

chunked

Vary

Performance

accept-encoding

connection: close
transfer-encoding: chunked
vary: accept-encoding

Caching Headers

Cache-Control

Caching

s-maxage=36000, max-age=5

Last-Modified

Caching

Fri, 01 May 2026 15:42:10 GMT

cache-control: s-maxage=36000, max-age=5
last-modified: Fri, 01 May 2026 15:42:10 GMT

Content Headers

Content-Type

Content

text/html; charset=UTF-8

content-type: text/html; charset=UTF-8

Server Headers

Server

cloudflare

server: cloudflare

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

set-cookie: __cf_bm=hfsy5k0MxXM1Zfob74OpE5wWX2nb2fiNlpnztGs4I28-1777818373.8772085-1.0.1.1-xJG5BSdywnl3X6U0mbjTYOJpWsypC.cocRowAkHs7YyAoZWaXsjmYdxmD8z8gwPFlr5elAF5AAaISwSwTieFHHPHY3oUedtM91QgRVhrHpCZr4rRlWPyRE1T1QwwshGq; HttpOnly; Secure; Path=/; Domain=www.expensepoint.com; Expires=Sun, 03 May 2026 14:56:13 GMT
_cfuvid=NpNKF5n2mHCJE61kftjQW6HGzwwfRsgGqiGgEur1LLw-1777818373.8772085-1.0.1.1-TK0WzUaHHUvAj.wrdvTXK4h_Aa6jIeAnM7cD8gHTtZE; HttpOnly; SameSite=None; Secure; Path=/; Domain=www.expensepoint.com

Other Headers

Alt-Svc

Other

h3=":443"; ma=86400

Cf-Ray

Other

9f5ff084bd35d6c0-IAD

Date

Other

Sun, 03 May 2026 14:26:13 GMT

Edge-Cache-Tag

Other

CT-189926725705,P-9137804,CW-185572436522,CW-185572436543,CW-185574029067,CW-189924713802,CW-189927071363,CW-190191298318,CW-191446638603,E-185570292352,E-185570292357,E-185570292358,E-185570299816,E-185570299962,E-185572436270,E-185572436279,E-185577375652,E-185577375654,E-185577377371,E-185768820898,E-185768820899,E-190191298326,RA-185570292561,RA-185570299820,PGS-ALL,SW-0,GC-185812023946,GC-185812023990,TS-185577375664

Link

Other

URL

https://unpkg.com/[email protected]/dist/aos.css

rel=preload as=style

URL https://www.expensepoint.com/hubfs/hub_generated/template_assets/1/185570299816/1777468347221/template_main.min.css

rel=preload as=style

URL https://www.expensepoint.com/hubfs/hub_generated/template_assets/1/185572436270/1777468347693/template_responsive.min.css

rel=preload as=style

URL https://www.expensepoint.com/hubfs/hub_generated/template_assets/1/185577377371/1777468343741/template_child.min.css

rel=preload as=style

Nel

Other

Report-To Group cf-nel max-age: 1w

success: 1.0%

Report-To

Other

Group cf-nel max-age: 1w

Endpoint 1 https://a.nel.cloudflare.com/report/v4?s=M2%2BYicDuI1zVxY3GLYtykC9ddOcNuX2%2FSZU1eMzBZJkODeM4z9VPb2hr7IaBvtw147gRz%2F4kr1yIeOzKt7nMZLly%2FxgzQSId41joIO0YZrN9Zu7WcykXlvNxrql58kk%2FEVJSqj6C

X-Hs-Cache-Config

Other

BrowserCache-5s-EdgeCache-180s

X-Hs-Cache-Control

Other

s-maxage=36000, max-age=0

X-Hs-Cf-Cache-Status

Other

HIT

X-Hs-Cfworker-Meta

Other

{"contentType":"SITE_PAGE","resolver":"PreRenderedContentResolver"}

X-Hs-Content-Id

Other

189926725705

X-Hs-Hub-Id

Other

9137804

X-Hs-Portal-Id

Other

9137804

X-Hs-Prerendered

Other

Fri, 01 May 2026 15:42:10 GMT

alt-svc: h3=":443"; ma=86400
cf-ray: 9f5ff084bd35d6c0-IAD
date: Sun, 03 May 2026 14:26:13 GMT
edge-cache-tag: CT-189926725705,P-9137804,CW-185572436522,CW-185572436543,CW-185574029067,CW-189924713802,CW-189927071363,CW-190191298318,CW-191446638603,E-185570292352,E-185570292357,E-185570292358,E-185570299816,E-185570299962,E-185572436270,E-185572436279,E-185577375652,E-185577375654,E-185577377371,E-185768820898,E-185768820899,E-190191298326,RA-185570292561,RA-185570299820,PGS-ALL,SW-0,GC-185812023946,GC-185812023990,TS-185577375664
link: <https://unpkg.com/[email protected]/dist/aos.css>; rel=preload; as=style,<https://www.expensepoint.com/hubfs/hub_generated/template_assets/1/185570299816/1777468347221/template_main.min.css>; rel=preload; as=style,<https://www.expensepoint.com/hubfs/hub_generated/template_assets/1/185572436270/1777468347693/template_responsive.min.css>; rel=preload; as=style,<https://www.expensepoint.com/hubfs/hub_generated/template_assets/1/185577377371/1777468343741/template_child.min.css>; rel=preload; as=style,<https://www.expensepoint.com/hubfs/hub_generated/module_assets/1/185574029067/1740967889553/module_Atlas_Cards.min.css>; rel=preload; as=style,<https://unpkg.com/@glidejs/[email protected]/dist/css/glide.core.min.css>; rel=preload; as=style,<https://www.expensepoint.com/hubfs/hub_generated/module_assets/1/189924713802/1762875577171/module_Atlas_Cards.min.css>; rel=preload; as=style
nel: {"report_to":"cf-nel","success_fraction":0.01,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=M2%2BYicDuI1zVxY3GLYtykC9ddOcNuX2%2FSZU1eMzBZJkODeM4z9VPb2hr7IaBvtw147gRz%2F4kr1yIeOzKt7nMZLly%2FxgzQSId41joIO0YZrN9Zu7WcykXlvNxrql58kk%2FEVJSqj6C"}]}
x-hs-cache-config: BrowserCache-5s-EdgeCache-180s
x-hs-cache-control: s-maxage=36000, max-age=0
x-hs-cf-cache-status: HIT
x-hs-cfworker-meta: {"contentType":"SITE_PAGE","resolver":"PreRenderedContentResolver"}
x-hs-content-id: 189926725705
x-hs-hub-id: 9137804
x-hs-portal-id: 9137804
x-hs-prerendered: Fri, 01 May 2026 15:42:10 GMT

Recommendations

Enable compression (gzip/brotli) to improve performance