| Header Name | Header Data |
|---|---|
| HTTP status code | 200 |
| Content-Type | text/html; charset=UTF-8 |
| Connection | keep-alive |
| Link | <https://www.walkme.com/wp-json/>; rel="https://api.w.org/" |
| X-Powered-By | WP Engine |
| X-Cache | HIT: 1 |
| X-Cache-Group | normal |
| Cf-Cache-Status | DYNAMIC |
| X-Content-Type-Options | nosniff |
| Alt-Svc | h3=":443"; ma=86400 |
| Date | Sun, 06 Apr 2025 12:17:59 GMT |
| Vary | Accept-Encoding |
| X-Frame-Options | DENY |
| Cache-Control | max-age=600, must-revalidate |
| Strict-Transport-Security | max-age=31536000; includeSubDomains; preload |
| Cf-Ray | 92c1399dcce333b7-AMS |
| Content-Security-Policy | default-src 'self'; media-src 'self' blob: walkmeqa.com walkme.com player.vimeo.com app.qualified.com *.walkmeqa.com *.walkme.com; worker-src 'self' blob: ; child-src 'self' blob: ; script-src 'self' blob: data: js.driftt.com a.quora.com static.ads-twitter.com ads.avocet.io bat.bing.com recorder-assets.getjaco.com maxcdn.bootstrapcdn.com www.googleadservices.com connect.facebook.net snap.licdn.com walkme.com walkmeqa.com www.googletagmanager.com code.jquery.com ajax.aspnetcdn.com 'unsafe-inline' 'unsafe-eval' stats.sa-as.com embed.typeform.com js.maxmind.com player.vimeo.com www.youtube.com s.ytimg.com www.google.co.in cdn.cookielaw.org geolocation.onetrust.com cdnjs.cloudflare.com walkmeassets.wpengine.com www.gstatic.com cdn.jsdelivr.net tags.crwdcntrl.net walkme.widget.insent.ai js.zi-scripts.com tracking.g2crowd.com js.adsrvr.org tag.demandbase.com j.6sc.co cdn.userway.org dev.visualwebsiteoptimizer.com www.clarity.ms cdn.taboola.com trc.taboola.com js.qualified.com js.chilipiper.com ws-assets.zoominfo.com www.google.com assets.trendemon.com trackingapi.trendemon.com googleads.g.doubleclick.net maps.googleapis.com platform.twitter.com ajax.googleapis.com fast.wistia.net www.google.co.il tags.clickagy.com pi.pardot.com *.walkmeqa.com *.walkme.com f.vimeocdn.com www.gstatic.com s.yimg.jp *.yahoo.co.jp *.influ2.com www.redditstatic.com; style-src 'self' fonts.googleapis.com maxcdn.bootstrapcdn.com www.walkme.com 'unsafe-inline' unpkg.com cdn.userway.org *.walkme.com www.gstatic.com www.googletagmanager.com; font-src * data:; img-src * data:; connect-src 'self' walkme.com api.ipstack.com freegeoip.net rapi.getjaco.com embedwistia-a.akamaihd.net geoip-js.maxmind.com vimeo.com geoip-js.com www.linkedin.com ws.zoominfo.com www.facebook.com bat.bing.com cdn.cookielaw.org o94797.ingest.sentry.io walkmeqa.com bcp.crwdcntrl.net bam.nr-data.net js.zi-scripts.com ipv6.6sc.co ib.adnxs.com secure.adnxs.com tracking.g2crowd.com wss://ws.qualified.com tag-Logger.demandbase.com px.ads.linkedin.com c.6sc.co epsilon.6sense.com api.userway.org dev.visualwebsiteoptimizer.com z.clarity.ms epsilon-globalaccelerator.6sense.com pips.taboola.com trc.taboola.com cds.taboola.com trc-events.taboola.com analytics.google.com region1.analytics.google.com cdn.userway.org api.company-target.com geolocation.onetrust.com privacyportal-de.onetrust.com stats.g.doubleclick.net r3.visualwebsiteoptimizer.com t.clarity.ms segments.company-target.com u.clarity.ms r1.visualwebsiteoptimizer.com maps.googleapis.com www.google-analytics.com w.clarity.ms s.clarity.ms r2.visualwebsiteoptimizer.com x.clarity.ms h.clarity.ms cdn77.api.userway.org aorta.clickagy.com hemsync.clickagy.com www.google.com p.clarity.ms googleads.g.doubleclick.net l.clarity.ms pagead2.googlesyndication.com epsilon-cloudfront.6sense.com q.clarity.ms m.clarity.ms e.clarity.ms b.clarity.ms psb.taboola.com a.clarity.ms i.clarity.ms *.walkme.com *.walkmeqa.com google.com y.clarity.ms monitor.clickcease.com fresnel.vimeocdn.com player-telemetry.vimeo.com vod-adaptive-ak.vimeocdn.com app.qualified.com *.yahoo.co.jp *.influ2.com eps.6sc.co v.eps.6sc.co www.redditstatic.com pixel-config.reddit.com; frame-src js.driftt.com player.vimeo.com walkmeqa.com walkme.com go.pardot.com www.youtube.com www.facebook.com www.linkedin.com walkmeassets.wpengine.com walkme.widget.insent.ai tsdtocl.com insight.adsrvr.org www.google.com s.company-target.com cdn.userway.org td.doubleclick.net match.adsrvr.org app.qualified.com hemsync.clickagy.com cdn.taboola.com walkme.wistia.com fast.wistia.com *.walkmeqa.com *.walkme.com eu.surveymonkey.com www.googletagmanager.com speakerdeck.com www.speakerdeck.com demo.arcade.software; frame-ancestors walkmeqa.com walkme.com www.getjaco.com getjaco.com cdnjs.cloudflare.com abbi.io www.abbi.io *.walkmeqa.com *.walkme.com cdn-static.bizzabo.com; |
| X-Xss-Protection | 1; mode=block |
| Referrer-Policy | strict-origin-when-cross-origin |
| Permissions-Policy | geolocation=(), microphone=() |
| X-Cacheable | SHORT |
| Server | cloudflare |
By using SecurityHeaders.info, you can quickly identify missing or misconfigured headers and take steps to secure your website, improving both security and user confidence.
This tool is widely used by developers, security professionals, and organizations to ensure their websites adhere to best practices in web security.
We also have another analytic tool that is used for identifying popularity metrics, general information about the business, finding similar products and competitors, and much more.
Watch it now at TrustRadar