| Header Name | Header Data |
|---|---|
| HTTP status code | 200 |
| Cache-Control | public, max-age=604800 |
| Date | Thu, 17 Apr 2025 01:57:38 GMT |
| Strict-Transport-Security | max-age=300 |
| X-Cache | HIT, HIT |
| X-Timer | S1744855059.789362,VS0,VE7 |
| Accept-Ranges | bytes |
| Connection | keep-alive |
| X-Pantheon-Styx-Hostname | styx-fe3-b-657bb69d44-r567j |
| Vary | Accept-Encoding, Cookie, Cookie |
| Content-Security-Policy | default-src 'self' sidecarhealth.b-cdn.net sidecarhealth.com td.doubleclick.net test-sidecar-health.pantheonsite.io sidecarhealth.localhost boards.greenhouse.io *.greenhouse.io greenhouse.io cdn.linkedin.oribi.io web1.acsbapp.com cdn.jsdelivr.net api.lever.co andreasmb.github.io player.vimeo.com vimeo.com bam.nr-data.net js-agent.newrelic.com px.ads.linkedin.com *.linkedin.com/* linkedin.com snapengage.com widget.trustpilot.com dev.visualwebsiteoptimizer.com utt.impactcdn.com cdn.heapanalytics.com acsbapp.com storage.googleapis.com bat.bing.com connect.facebook.net *.facebook.net/* *.facebook.com snap.licdn.com cdn.callrail.com pix.pub *.hotjar.com in.hotjar.com heapanalytics.com cdn.acsbapp.com logs-01.loggly.com snapengage.com vars.hotjar.com use.fontawesome.com static.hotjar.com 1.gravatar.com id.rlcdn.com js.hsleadflows.net stats.g.doubleclick.net *.hubspot.com perf.hsforms.com forms-na1.hsforms.com *.gstatic.com/* api.hubapi.com forms.hubspot.com hubspot.com js.hs-banner.com js.hscollectedforms.net js.hsadspixel.net js.hs-analytics.net api.livechatinc.com secure.livechatinc.com google.com google.ro google-analytics.com/* www.google-analytics.com/analytics.js *.google.com www.googletagmanager.com *.ipify.org googletagmanager.com googleads.g.doubleclick.net js.hs-scripts.com cdn.livechatinc.com boards.greenhouse.io boards-api.greenhouse.io hubspot-forms-static-embed.s3.amazonaws.com forms.hsforms.com js.hsforms.net cdnjs.cloudflare.com unpkg.com secure.gravatar.com fonts.googleapis.com fonts.gstatic.com analytics.js recaptcha__en.js browser.sentry-cdn.com app.hubspot.com static.hsappstatic.net client-api.auryc.com apps.usw2.pure.cloud api.usw2.pure.cloud api-cdn.usw2.pure.cloud googleadservices.com genesys.min.js wss://webmessaging.usw2.pure.cloud sharer.min.js *.pure.cloud wss://cobrowse-v2.usw2.pure.cloud www.gstatic.com *.adsrvr.org *.contentsquare.net *.hs-scripts.com edge.marker.io api.marker.io 'unsafe-inline' 'unsafe-eval' data: blob: ; |
| Content-Type | text/html; charset=UTF-8 |
| Link | <https://sidecarhealth.com/wp-json/>; rel="https://api.w.org/" |
| Server | nginx |
| X-Styx-Req-Id | 16361efe-1b0c-11f0-b4ae-f68e6560f104 |
| X-Served-By | cache-chi-klot8100042-CHI, cache-ams21067-AMS |
| X-Cache-Hits | 31, 0 |
| Age | 15138 |
| Via | 1.1 varnish, 1.1 varnish |
By using SecurityHeaders.info, you can quickly identify missing or misconfigured headers and take steps to secure your website, improving both security and user confidence.
This tool is widely used by developers, security professionals, and organizations to ensure their websites adhere to best practices in web security.
We also have another analytic tool that is used for identifying popularity metrics, general information about the business, finding similar products and competitors, and much more.
Watch it now at TrustRadar