HTTP Headers Analysis for https://www.rapid7.com

Open Cached · just now

31 Headers

Detected Technologies from Headers

See all in URL Inspect 36

Google AdSense

Google Tag Manager

Bugsnag

Bing

AppNexus (Xandr)

Google DoubleClick

Google Analytics

Microsoft Advertising

Google Conversion Tracking

Pusher

6sense

Cloudflare CDN

Google Static File Front End

Next.js

Google Fonts

Vidyard

Grafana Active incidents

Algolia

BrightTALK

ZoomInfo

Google Search

Adobe Marketo

Qualified

Facebook

Impartner

OneTrust

Adobe Fonts (Typekit)

Contentstack

AWS

AWS CloudFront

Visual Website Optimizer

YouTube

Microsoft Clarity

Google Cloud

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=63072000; includeSubDomains; preload

Content-Security-Policy

Good

default-src; script-src; style-src; +6 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Missing

Not configured

Recommendations

• Strengthen CSP by removing 'unsafe-eval'
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

Transfer-Encoding

Performance

chunked

Vary

Performance

rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding

connection: close
transfer-encoding: chunked
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding

Caching Headers

Cache-Control

Caching

no-cache, no-store, must-revalidate

cache-control: no-cache, no-store, must-revalidate

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

Server

cloudflare

server: cloudflare

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

set-cookie: NEXT_LOCALE=en; Path=/; SameSite=lax
csrf-token=c00c5c4f-0c74-4b81-920d-fc94554e941a; Path=/; Secure; SameSite=strict
__cf_bm=7Jn6V14GQgvNZODGULXetEBBSsDup_12IoP0JhKc5LA-1777811572.48822-1.0.1.1-x5_7Fs7qIhxAh2aqH00P6fV1ZRFpH5GV3tGQY7acGx_ygtbfZpQbXSHNXTE0HLDNjBOp6LdHhSZh.AV7FZtlFYzmMYXILFA.ashFPJwtdDkF7drTtIexSjVzSyD7DM_6; HttpOnly; Secure; Path=/; Domain=contentstackapps.com; Expires=Sun, 03 May 2026 13:02:52 GMT
x-failover-origin=; Path=/; Max-Age=0; Secure; SameSite=Lax
r7_bot_user=false; Max-Age=3600; Path=/; Secure; SameSite=Lax

Other Headers

Cf-Cache-Status

Other

BYPASS

Cf-Ray

Other

9f5f4a780fc63d1c-IAD

Date

Other

Sun, 03 May 2026 12:32:52 GMT

Link

Other

URL /_next/static/media/83afe278b6a6bb3c.p.0q-301v4kxxnr.woff2

rel=preload as=font crossorigin type=font/woff2

URL

/_next/static/chunks/0kbxsccsc3wrk.css

rel=preload as=style

URL

/_next/static/chunks/03f5z0.1oi2es.css

rel=preload as=style

URL

/_next/static/chunks/0y-dwicz0lkny.css

rel=preload as=style

URL /_next/static/media/83afe278b6a6bb3c.p.0q-301v4kxxnr.woff2

rel=preload as=font crossorigin type=font/woff2

URL

/_next/static/chunks/0kbxsccsc3wrk.css

rel=preload as=style

URL

/_next/static/chunks/03f5z0.1oi2es.css

rel=preload as=style

URL

/_next/static/chunks/0y-dwicz0lkny.css

rel=preload as=style

URL

/_next/static/chunks/0dfbl8~.~i0q0.css

rel=preload as=style

URL

/_next/static/chunks/0qly_4m81yqfo.css

rel=preload as=style

URL

/_next/static/chunks/081oslzt229yv.css

rel=preload as=style

URL

/_next/static/chunks/11l2uex5yax5g.css

rel=preload as=style

URL

/_next/static/chunks/07w7dm_80prky.css

rel=preload as=style

Via

Other

1.1 46c6865a1e01f65400f5a41239c74456.cloudfront.net (CloudFront)

X-Amz-Cf-Id

Other

LdmUWuLHI5RqYTzMqe1jEAnN2ueuMAycreoLhD6Qhq9hJszJhgLP9A==

X-Amz-Cf-Pop

Other

IAD12-P5

X-Amzn-Requestid

Other

31508af4-9fae-47ce-b604-e79845130b64

X-Amzn-Trace-Id

Other

Root=1-69f74074-3ba321c04bb419c032960f90;Parent=65adec8513bfceee;Sampled=0;Lineage=1:26e2c111:0

X-Cache

Other

Miss from cloudfront

X-Deployment-Uid

Other

69f321c7f8ed9900e2b22736

X-Dns-Prefetch-Control

Other

X-Environment-Uid

Other

66a287b352edf03fcf2b91ea

X-Middleware-Rewrite

Other

/en

X-Org-Uid

Other

bltfa3ce6c73d332e12

X-Pathname

Other

X-Project-Uid

Other

66a287b352edf03fcf2b91e4

cf-cache-status: BYPASS
cf-ray: 9f5f4a780fc63d1c-IAD
date: Sun, 03 May 2026 12:32:52 GMT
link: </_next/static/media/83afe278b6a6bb3c.p.0q-301v4kxxnr.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/chunks/0kbxsccsc3wrk.css>; rel=preload; as="style", </_next/static/chunks/03f5z0.1oi2es.css>; rel=preload; as="style", </_next/static/chunks/0y-dwicz0lkny.css>; rel=preload; as="style", </_next/static/chunks/0dfbl8~.~i0q0.css>; rel=preload; as="style", </_next/static/chunks/0qly_4m81yqfo.css>; rel=preload; as="style", </_next/static/chunks/081oslzt229yv.css>; rel=preload; as="style", </_next/static/chunks/11l2uex5yax5g.css>; rel=preload; as="style", </_next/static/chunks/07w7dm_80prky.css>; rel=preload; as="style"
via: 1.1 46c6865a1e01f65400f5a41239c74456.cloudfront.net (CloudFront)
x-amz-cf-id: LdmUWuLHI5RqYTzMqe1jEAnN2ueuMAycreoLhD6Qhq9hJszJhgLP9A==
x-amz-cf-pop: IAD12-P5
x-amzn-requestid: 31508af4-9fae-47ce-b604-e79845130b64
x-amzn-trace-id: Root=1-69f74074-3ba321c04bb419c032960f90;Parent=65adec8513bfceee;Sampled=0;Lineage=1:26e2c111:0
x-cache: Miss from cloudfront
x-deployment-uid: 69f321c7f8ed9900e2b22736
x-dns-prefetch-control: on
x-environment-uid: 66a287b352edf03fcf2b91ea
x-middleware-rewrite: /en
x-org-uid: bltfa3ce6c73d332e12
x-pathname: /
x-project-uid: 66a287b352edf03fcf2b91e4

Recommendations

Enable compression (gzip/brotli) to improve performance