hubspot.com | Analytics by SecurityHeaders

HTTP Headers report for hubspot.com

Header Name Header Data
HTTP status code 200
X-Evy-Trace-Virtual-Host all
X-Xss-Protection 1
Date Sat, 05 Apr 2025 01:22:48 GMT
Cache-Control s-maxage=7200,max-age=5
Access-Control-Allow-Credentials false
Content-Security-Policy script-src 'unsafe-inline' 'unsafe-eval' 'self' 1003891.track.convertexperiments.com app.hubspot.com cdn-3.convertexperiments.com cdn.pdst.fm connect.facebook.net js.hs-analytics.net js.hs-banner.com js.hsforms.net js.hsleadflows.net js.hubspotfeedback.com js.usemessages.com organizer.bizzabo.com play.vidyard.com script.hotjar.com snap.licdn.com static.hotjar.com static.hsappstatic.net www.google-analytics.com www.googletagmanager.com www.recaptcha.net code.highcharts.com www.youtube.com js.hubspot.com www.dropbox.com widget.altrulabs.com www.google.com maps.googleapis.com wt-assets.hubteam.com cdn2.hubspot.net www.redditstatic.com cdn.veritonic.com gosniply.com d.impactradius-event.com js.hubspot.com analytics.tiktok.com 'strict-dynamic' 'nonce-+GlLUN7CuNu7EqCIywnJMw=='; report-uri https://send.hsbrowserreports.com/csp/report; upgrade-insecure-requests
X-Evy-Trace-Route-Service-Name envoyset-translator
Cf-Cache-Status DYNAMIC
Link </hs/hsstatic/content-cwv-embed/static-1.1293/embed.js>; rel=preload; as=script, </hs/hsstatic/cos-i18n/static-1.53/bundles/project.js>; rel=preload; as=script
Edge-Cache-Tag CT-128188452889,P-53,CW-117899191457,CW-117909732439,CW-117909732444,CW-117909735318,CW-117909735322,CW-117909735325,CW-128019722664,CW-130444177820,CW-146307909958,CW-149406849440,CW-187172591700,CW-39963105441,CW-80984929436,CW-80990896713,CW-80991154572,CW-80992206946,CW-80992206947,CW-80992206983,DB-20636946,DB-2678762,DB-2896948,E-109800850961,E-112565063773,E-117907621800,E-117909735346,E-117911665818,E-117913090223,E-117913091097,E-124154297647,E-128186837045,E-130253705477,E-130444160887,E-133330645318,E-134552513306,E-134552826933,E-134554077014,E-134554077020,E-134554077021,E-134554077022,E-134554077024,E-134554266002,E-134554266005,E-134555215901,E-134555215907,E-134555644730,E-134555644731,E-137607693906,E-145435623343,E-145435696777,E-145435696781,E-145435905903,E-153203747463,E-160571449455,E-168564936819,E-181806770228,E-182757519914,E-182757520268,E-182757520273,E-182757520277,E-182761488664,E-182761488691,E-182762110992,E-182762110994,E-182772802595,E-182772802598,E-182772802604,E-182772802611,E-182772802612,E-182772802618,E-182772802623,E-182772896941,E-182772896942,E-182772896949,E-182772896951,E-182772897027,E-182773947774,E-182773947776,E-182774611356,E-182774864397,E-182774864401,E-182774864404,E-182774864408,E-183504098971,E-183505789053,E-183972152372,E-184970967646,E-185795687778,E-186806927767,E-186807309163,E-186807393882,E-186807704461,E-186807707401,E-186808447385,E-186808447403,E-186808447492,E-186808449041,E-186808449062,E-186986174512,E-187957699930,E-188327041555,E-188327100024,E-188327573271,E-188327573274,E-188327573275,E-188327665702,E-188329209741,E-188329209748,E-188329223575,E-188329223601,E-188329223604,E-188329345460,E-188329346742,E-27335243879,E-27335426396,E-28338820573,E-29576524729,E-29576570488,E-29584276880,E-29584276881,E-29584276882,E-29744273155,E-32625894203,E-33497625588,E-34744580980,E-34749935782,E-66318755979,E-80991207740,E-80991207741,E-80992946022,E-80992946331,E-80992946334,E-80992946343,E-8384041284,E-88014303377,PGS-ALL,SW-0
X-Hs-Content-Id 128188452889
Strict-Transport-Security max-age=31536000; includeSubDomains; preload
Content-Security-Policy-Report-Only script-src 'self' 'unsafe-inline' 'unsafe-eval' 1003891.track.convertexperiments.com app.hubspot.com cdn-3.convertexperiments.com cdn.pdst.fm connect.facebook.net js.hs-analytics.net js.hs-banner.com js.hsforms.net js.hsleadflows.net js.hubspotfeedback.com js.usemessages.com play.vidyard.com script.hotjar.com snap.licdn.com static.hotjar.com static.hsappstatic.net www.google-analytics.com www.googletagmanager.com www.recaptcha.net code.highcharts.com www.youtube.com js.hubspot.com www.dropbox.com widget.altrulabs.com www.google.com maps.googleapis.com wt-assets.hubteam.com cdn2.hubspot.net www.redditstatic.com cdn.veritonic.com gosniply.com d.impactradius-event.com test.test.com js.hubspot.com analytics.tiktok.com 'strict-dynamic' 'nonce-+GlLUN7CuNu7EqCIywnJMw=='; report-uri https://send.hsbrowserreports.com/csp/report
X-Hubspot-Correlation-Id 06f0d593-63bd-45e5-96ae-457b074c453a
Last-Modified Sat, 05 Apr 2025 00:32:27 GMT
X-Envoy-Upstream-Service-Time 478
X-Request-Id 06f0d593-63bd-45e5-96ae-457b074c453a
Nel {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Report-To {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SWairitMizn1d1Ff%2F%2FCpULRFK7mUrMZuW3joozXpm2lehnFAOCLdklWPo5mk5AfAvsaz0hYmWPQZFnNh%2F2EtuO%2BD%2BsbqlScYzmwof0OdIxXWTZo7%2F5NYcepJZqO%2FSJ6Dyg%3D%3D"}],"group":"cf-nel","max_age":604800}
X-Content-Type-Options nosniff
X-Hs-Hub-Id 53
Connection keep-alive
Vary origin, Accept-Encoding
X-Evy-Trace-Listener listener_https
X-Frame-Options deny
Server cloudflare
X-Hs-Content-Campaign-Id 04cbbcfa-f5ea-4e61-b964-94568fa05973
Content-Type text/html;charset=utf-8
Cf-Ray 92b53c8a0d990b70-AMS
Referrer-Policy no-referrer-when-downgrade
X-Evy-Trace-Route-Configuration listener_https/all
X-Evy-Trace-Served-By-Pod iad02/cms-hs-com-td/envoy-proxy-64c547cdb-mgf94
Age 3019
Set-Cookie __cf_bm=.bedXlwKixRhHy.itTImFhAfjkgYFV9hGM952jmCxs8-1743816168-1.0.1.1-bbjNbJMb1.iGStHSiWUld5jKxJS825njRtnU5SpxCfgOraajfnubx.iWVz1fm9TGFLp8oFiALW13LoaQhl1x7cEHin20nTRU2hnsM.Bt2R8; path=/; expires=Sat, 05-Apr-25 01:52:48 GMT; domain=.www.hubspot.com; HttpOnly; Secure; SameSite=None
X-Hs-Cache-Config BrowserCache-5s-EdgeCache-7200s

About the tool

By using SecurityHeaders.info, you can quickly identify missing or misconfigured headers and take steps to secure your website, improving both security and user confidence.

This tool is widely used by developers, security professionals, and organizations to ensure their websites adhere to best practices in web security.

We also have another analytic tool that is used for identifying popularity metrics, general information about the business, finding similar products and competitors, and much more.

Watch it now at TrustRadar