Header Name | Header Data |
---|---|
HTTP status code | 200 |
X-Powered-By | Next.js |
X-Vercel-Cache | HIT |
X-Vercel-Id | fra1::iad1::z2xlx-1744187113642-8991ad4727c2 |
Content-Type | text/html; charset=utf-8 |
Server | Vercel |
X-Content-Type-Options | nosniff |
X-Matched-Path | /en/[[...path]] |
Etag | W/"92ij9kc6vo1rb5" |
Age | 1597 |
Cache-Control | public, max-age=0, must-revalidate |
Strict-Transport-Security | max-age=63072000 |
Content-Security-Policy | default-src 'self' *.crazyegg.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.vercel.app *.onetrust.com *.cloudfront.net *.crazyegg.com jsv3.recruitics.com bat.bing.com px.ads.linkedin.com static.ads-twitter.com www.clarity.ms connect.facebook.com cse.google.com cookie-cdn.1trust.app snap.licdn.com connect.facebook.net static.ads-twitter.com cdn.cookielaw.org cookie-cdn.cookiepro.com www.redditstatic.com tag.demandbase.com www.google-analytics.com ngc.avature.net api-engage-us.sitecorecloud.io www.googletagmanager.com www.youtube.com x.com platform.twitter.com t.co tagmanager.google.com; script-src-elem 'self' 'unsafe-eval' 'unsafe-inline' *.vercel.app *.onetrust.com *.cloudfront.net *.crazyegg.com jsv3.recruitics.com www.google.com bat.bing.com px.ads.linkedin.com static.ads-twitter.com connect.facebook.com cse.google.com cookie-cdn.1trust.app snap.licdn.com connect.facebook.net static.ads-twitter.com www.redditstatic.com cse.google.com www.googleadservices.com googleads.g.doubleclick.net tag.demandbase.com www.google-analytics.com cookie-cdn.1trust.app cdn.cookielaw.org cookie-cdn.cookiepro.com ngc.avature.net www.googletagmanager.com code.jquery.com www.youtube.com x.com platform.twitter.com t.co; connect-src 'self' *.vercel.app *.northropgrumman.com *.onetrust.com *.crazyegg.com stats.g.doubleclick.net www.google-analytics.com bat.bing.com px.ads.linkedin.com static.ads-twitter.com connect.facebook.com cse.google.com cookie-cdn.1trust.app snap.licdn.com connect.facebook.net static.ads-twitter.com analytics.google.com conversions-config.reddit.com www.redditstatic.com pixel-config.reddit.com www.googleapis.com rum.browser-intake-datadoghq.com api.company-target.com cookie-cdn.1trust.app cdn.cookielaw.org cookie-cdn.cookiepro.com pagestates-tracking.crazyegg.com assets-tracking.crazyegg.com tracking.crazyegg.com ngc.avature.net vitals.vercel-insights.com x.com platform.twitter.com t.co api-engage-us.sitecorecloud.io discover.sitecorecloud.io/; base-uri 'self'; form-action 'self' login.microsoftonline.us; font-src 'self' 'unsafe-inline' *.vercel.app *.crazyegg.com ngc.avature.net use.typekit.net fonts.gstatic.com *.northropgrumman.com *.agencyq.site cdn.northrupgrumman.com data:; style-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.vercel.app *.northropgrumman.com *.onetrust.com *.crazyegg.com ngc.avature.net www.google.com use.typekit.net p.typekit.net fonts.googleapis.com; frame-src 'self' *.vercel.app *.doubleclick.net *.agencyq.site *.northropgrumman.com *.onetrust.com *.crazyegg.com portalstospace.com login.goservicepro.com jsv3.recruitics.com ngc.avature.net s.company-target.com td.doubleclick.net jsv3.recruitics.com www.portalstospace.com www.youtube.com x.com platform.twitter.com t.co w.soundcloud.com data: blob: www.googletagmanager.com; img-src 'self' data: * northropgrumman-sb1.dam.aprimo.com s1.sb.previews.aprimo.com s.gravatar.com *.crazyegg.com *.wp.com/cdn.auth0.com/avatars; media-src 'self' *.vercel.app *.agencyq.site *.northropgrumman.com *.onetrust.com *.crazyegg.com ngc.avature.net x.com platform.twitter.com t.co img.youtube.com data:; worker-src blob: *.crazyegg.com; |
Date | Wed, 09 Apr 2025 07:28:30 GMT |
By using SecurityHeaders.info, you can quickly identify missing or misconfigured headers and take steps to secure your website, improving both security and user confidence.
This tool is widely used by developers, security professionals, and organizations to ensure their websites adhere to best practices in web security.
We also have another analytic tool that is used for identifying popularity metrics, general information about the business, finding similar products and competitors, and much more.
Watch it now at TrustRadar