HTTP Headers Analysis for https://www.zyme.com

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=31622400; includeSubDomains; preload

Content-Security-Policy

Missing

Not configured

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

3 headers

Accept-Ranges

Performance

bytes

Connection

Performance

close

Vary

Performance

Accept-Encoding, Cookie, Cookie

Caching Headers

2 headers

Age

Caching

44059

Cache-Control

Caching

public, max-age=604800

Content Headers

2 headers

Content-Length

Content

1695822

Content-Type

Content

text/html; charset=UTF-8

Server Headers

1 headers

Server

nginx

CORS Headers

0 headers

No CORS headers found

Cookies Headers

0 headers

No cookies headers found

Other Headers

13 headers

Content-Security-Policy-Report-Only

Other

default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://fonts.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.greenhouse.io https://*.osano.com blob: https://pages.e2open.com https://cdn-cookieyes.com https://play.vidyard.com https://snap.licdn.com https://ws.zoominfo.com https://*.clarity.ms https://cdn.bizible.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://js-agent.newrelic.com https://*.6sc.co https://*.adsrvr.org https://*.abrankings.com https://*.google-analytics.com https://bat.bing.com https://*.hotjar.com https://*.crazyegg.com https://connect.facebook.net https://*.marketo.net https://*.demandbase.com https://*.ads-twitter.com; style-src 'self' 'unsafe-inline' data: https://*.greenhouse.io https://*.osano.com https://pages.e2open.com https://cdn.jsdelivr.net https://*.googleapis.com; img-src 'self' data: https://secure.gravatar.com https://www.gravatar.com https://*.bizible.com https://*.bizibly.com https://*.licdn.com https://*.clarity.ms https://*.googlesyndication.com https://*.doubleclick.net https://stats.g.doubleclick.net https://*.linkedin.com https://t.co https://analytics.twitter.com https://*.6sc.co https://*.bing.com https://*.facebook.com https://*.rlcdn.com https://*.company-target.com https://*.facebook.net https://cdn-cookieyes.com https://*.vidyard.com secure.gravatar.com www.gravatar.com; connect-src 'self' https://*.greenhouse.io https://*.osano.com https://*.linkedin.com https://*.licdn.com https://www.google.com https://*.google-analytics.com https://sheets.googleapis.com https://*.vidyard.com https://bam.nr-data.net https://*.linkedin.com https://*.licdn.com https://www.google-analytics.com https://region1.google-analytics.com https://secure.adnxs.com https://*.6sc.co https://*.6sense.com https://api.company-target.com https://script.crazyegg.com https://*.mktoresp.com https://*.clarity.ms https://*.abrankings.com https://insight.adsrvr.org https://*.demandbase.com https://*.facebook.com https://*.hotjar.io https://log.cookieyes.com https://cdn-cookieyes.com; frame-src 'self' https://*.greenhouse.io https://*.osano.com https://pages.e2open.com https://www.googletagmanager.com https://*.company-target.com https://*.adsrvr.org https://*.vidyard.com; worker-src 'self' https://*.osano.com blob:;

Date

Other

Wed, 04 Feb 2026 09:36:00 GMT

Link

Other

<https://www.e2open.com/>; rel=shortlink

Via

Other

1.1 varnish, 1.1 varnish

X-Cache

Other

HIT, HIT

X-Cache-Hits

Other

67, 0

X-Pantheon-Styx-Hostname

Other

styx-fe3-b-6f684c5d8c-hscvf

X-Served-By

Other

cache-chi-klot8100169-CHI, cache-ewr-kewr1740077-EWR

X-Styx-Req-Id

Other

52634b2e-0146-11f1-ada2-f2427f0ec7c3

X-Tec-Api-Origin

Other

https://www.e2open.com

X-Tec-Api-Root

Other

https://www.e2open.com/wp-json/tribe/events/v1/

X-Tec-Api-Version

Other

v1

X-Timer

Other

S1770197760.314921,VS0,VE3

Recommendations

Enable compression (gzip/brotli) to improve performance