gao.gov | Analytics by SecurityHeaders

HTTP Headers report for gao.gov

Header Name Header Data
HTTP status code 200
X-Ah-Environment prod
Etag "1744401292"
Server nginx
X-Drupal-Dynamic-Cache UNCACHEABLE (poor cacheability)
X-Generator Drupal 10 (https://www.drupal.org)
X-Xss-Protection 1; mode=block
Accept-Ranges bytes
Content-Type text/html; charset=UTF-8
Date Sat, 12 Apr 2025 06:05:25 GMT
Referrer-Policy no-referrer
Strict-Transport-Security max-age=1000
X-Drupal-Cache MISS
Connection keep-alive
Content-Language en
X-Cache HIT
X-Content-Security-Policy report-uri /report-csp-violation; upgrade-insecure-requests
X-Content-Type-Options nosniff
Via varnish
X-Request-Id v-d57ee9b4-170e-11f0-ad99-5fbce3dc4124
Age 36631
Vary Cookie,Accept-Encoding
X-Cache-Hits 6441
X-Frame-Options SAMEORIGIN
X-Webkit-Csp report-uri /report-csp-violation; upgrade-insecure-requests
Content-Security-Policy report-uri /report-csp-violation; upgrade-insecure-requests
Expires Sun, 19 Nov 1978 05:00:00 GMT
Last-Modified Fri, 11 Apr 2025 19:54:52 GMT
Cache-Control max-age=31536000, public

About the tool

By using SecurityHeaders.info, you can quickly identify missing or misconfigured headers and take steps to secure your website, improving both security and user confidence.

This tool is widely used by developers, security professionals, and organizations to ensure their websites adhere to best practices in web security.

We also have another analytic tool that is used for identifying popularity metrics, general information about the business, finding similar products and competitors, and much more.

Watch it now at TrustRadar