| Header Name | Header Data |
|---|---|
| HTTP status code | 200 |
| Etag | "1gykw7zitdba67" |
| Vary | Accept-Encoding |
| Content-Type | text/html; charset=utf-8 |
| X-Frame-Options | SAMEORIGIN |
| Content-Security-Policy | default-src 'self' https; connect-src 'self' https://dc.services.visualstudio.com https://attach.ukpowernetworks.co.uk https://*.go-mpulse.net https://*.akstat.io/ https://*.akamaihd.net/ www.google-analytics.com region1.google-analytics.com https://apikeys.civiccomputing.com/c/v https://in.hotjar.com/ https://vc.hotjar.io https://clapi.civiccomputing.com/ stats.g.doubleclick.net https://translate.googleapis.com https://maps.googleapis.com https://api.what3words.com https://*.googleapis.com *.google.com https://*.gstatic.com data: blob: https://*.applicationinsights.azure.com https://*.azurewebsites.net https://graph.microsoft.com/ https://*.tangentlabs.co.uk https://col.site24x7rum.eu https://l.sharethis.com https://platform.twitter.com/widgets.js https://connect.facebook.net https://api.reciteme.com https://stats.reciteme.com https://speechstreamv3-webservices-8.texthelp.com/ https://wikisum.texthelp.com/ https://babm.texthelp.com https://*.speechstream.net https://en.wikipedia.org/ https://pfw-prod-ukwest-safespaceonline.azurewebsites.net https://apps.parcelforce.com/sso/Home/IsAlive https://apps.parcelforce.com/sso/ https://static.queue-it.net 956e469338e2e6898c68816e7d5d70.4d.environment.api.powerplatform.com 122893fe7778e05ebe27d6a1abed5c.42.environment.api.powerplatform.com 0f561d2ccae5e5c6b9552edc1c9164.5b.environment.api.powerplatform.com europe.directline.botframework.com wss://europe.directline.botframework.com *.uk.omnichannelengagementhub.com eu-mobile.events.data.microsoft.com browser.pipe.aria.microsoft.com *.uk.communication.azure.com *.communication.microsoft.com *.trouter.teams.microsoft.com teams.microsoft.com/registrar/prod/v3/registrations prod.registrar.skype.com/v3/registrations wss://*.trouter.teams.microsoft.com *.events.data.microsoft.com; font-src 'self' ukpn.local hello.myfonts.net data: https://*.blob.core.windows.net https://*.tangentlabs.co.uk fonts.googleapis.com fonts.gstatic.com https://fonts.gstatic.com https://pfw-prod-ukwest-safespaceonline.azurewebsites.net/ https://api.reciteme.com https://ukpn-dev-cdn.tangentlabs.co.uk https://*.cdn.office.net; style-src 'self' 'unsafe-inline' ukpn.local https://*.blob.core.windows.net https://*.tangentlabs.co.uk fonts.googleapis.com https://fonts.googleapis.com https://api.reciteme.com https://ukpn-dev-cdn.tangentlabs.co.uk https://pfw-prod-ukwest-safespaceonline.azurewebsites.net oc-cdn-public-gbr.azureedge.net/livechatwidget/v2public/styles/LiveChatWidgetFrame.css; script-src 'self' 'unsafe-eval' ukpn.local https://*.go-mpulse.net 'unsafe-inline' https://*.blob.core.windows.net https://*.tangentlabs.co.uk https://cc.cdn.civiccomputing.com/9/cookieControl-9.x.min.js https://www.googletagmanager.com/ns.html www.googletagmanager.com cdnjs.cloudflare.com www.google-analytics.com script.hotjar.com static.hotjar.com http://widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js z.moatads.com https://translate.google.com/ https://translate.googleapis.com/ apis.google.com www.google.com www.gstatic.com maps.googleapis.com ajax.googleapis.com https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com *.googleusercontent.com blob: https://static.site24x7rum.eu https://widget.trustpilot.com https://t.sharethis.com https://platform-api.sharethis.com https://buttons-config.sharethis.com https://graph.facebook.com https://www.youtube.com https://www.linkedin.com/ https://s.ytimg.com https://platform.twitter.com https://connect.facebook.net https://api.reciteme.com https://stats.reciteme.com https://*.speechstream.net https://wikisum.texthelp.com/ https://ukpn-dev-cdn.tangentlabs.co.uk https://pfw-prod-ukwest-safespaceonline.azurewebsites.net https://ukpowernetworks.queue-it.net https://ukpowernetwork.queue-it.net https://static.queue-it.net/script/queueclient.min.js https://static.queue-it.net/script/queueconfigloader.min.js https://assets.queue-it.net cdn.botframework.com oc-cdn-public-gbr.azureedge.net/livechatwidget/scripts/LiveChatBootstrapper.js oc-cdn-public-gbr.azureedge.net/livechatwidget/v2scripts/LiveChatBootstrapper.js oc-cdn-public-gbr.azureedge.net https://grid.is; img-src 'self' data: https://api.umbraco.io https://media.umbraco.io https://img.youtube.com https://*.tangentlabs.co.uk https://pfw-prod-ukwest-safespaceonline.azurewebsites.net https://*.blob.core.windows.net www.google-analytics.com *.googletagmanager.com stats.g.doubleclick.net www.google.com/ads www.google.co.uk/ads https://translate.google.com maps.gstatic.com maps.googleapis.com https://www.google.com https://www.google.co.uk/ https://www.google.com/images/cleardot.gif https://www.gstatic.com fonts.googleapis.com apis.google.com https://*.googleapis.com https://*.gstatic.com *.google.com *.googleusercontent.com https://l.sharethis.com https://api.reciteme.com https://speechstreamv3-webservices-8.texthelp.com/ https://upload.wikimedia.org blob:; child-src 'self' https://www.googletagmanager.com/ns.html https://content.googleapis.com; frame-src 'self' https://powerupgames.z33.web.core.windows.net https://vars.hotjar.com https://powerupgames.z33.web.core.windows.net/hunt-the-hazards/story.html www.google.com *.google.com https://www.googletagmanager.com www.youtube.com www.linkedin.com https://widget.trustpilot.com http://t.sharethis.com https://platform-api.sharethis.com https://platform.twitter.com https://web.facebook.com/ https://www.facebook.com/ https://m.facebook.com/ https://api.reciteme.com https://*.speechstream.net web.powerva.microsoft.com https://956e469338e2e6898c68816e7d5d70.4d.environment.api.powerplatform.com https://122893fe7778e05ebe27d6a1abed5c.42.environment.api.powerplatform.com https://0f561d2ccae5e5c6b9552edc1c9164.5b.environment.api.powerplatform.com https://oc-cdn-public-gbr.azureedge.net/ https://comms.omnichannelengagementhub.com/ https://grid.is; object-src data:; worker-src blob:; media-src https://api.reciteme.com self https://*.speechstream.net data:; |
| X-Akamai-Transformed | 9 - 0 pmb=mRUM,1 |
| Server-Timing | cdn-cache; desc=HIT |
| Request-Context | appId=cid-v1:0aad90b1-3763-4996-bb57-cd0ba9dc0e78 |
| Strict-Transport-Security | max-age=31536000; includeSubDomains |
| X-Content-Type-Options | nosniff |
| X-Nextjs-Cache | HIT |
| Date | Sat, 03 May 2025 21:30:05 GMT |
| Connection | keep-alive |
| Alt-Svc | h3=":443"; ma=93600 |
| X-Xss-Protection | 1; mode=block |
| X-Content-Security-Policy | default-src 'self' https; connect-src 'self' https://dc.services.visualstudio.com https://attach.ukpowernetworks.co.uk https://*.go-mpulse.net https://*.akstat.io/ https://*.akamaihd.net/ www.google-analytics.com region1.google-analytics.com https://apikeys.civiccomputing.com/c/v https://in.hotjar.com/ https://vc.hotjar.io https://clapi.civiccomputing.com/ stats.g.doubleclick.net https://translate.googleapis.com https://maps.googleapis.com https://api.what3words.com https://*.googleapis.com *.google.com https://*.gstatic.com data: blob: https://*.applicationinsights.azure.com https://*.azurewebsites.net https://graph.microsoft.com/ https://*.tangentlabs.co.uk https://col.site24x7rum.eu https://l.sharethis.com https://platform.twitter.com/widgets.js https://connect.facebook.net https://api.reciteme.com https://stats.reciteme.com https://speechstreamv3-webservices-8.texthelp.com/ https://wikisum.texthelp.com/ https://babm.texthelp.com https://*.speechstream.net https://en.wikipedia.org/ https://pfw-prod-ukwest-safespaceonline.azurewebsites.net https://apps.parcelforce.com/sso/Home/IsAlive https://apps.parcelforce.com/sso/ https://static.queue-it.net 956e469338e2e6898c68816e7d5d70.4d.environment.api.powerplatform.com 122893fe7778e05ebe27d6a1abed5c.42.environment.api.powerplatform.com 0f561d2ccae5e5c6b9552edc1c9164.5b.environment.api.powerplatform.com europe.directline.botframework.com wss://europe.directline.botframework.com *.uk.omnichannelengagementhub.com eu-mobile.events.data.microsoft.com browser.pipe.aria.microsoft.com *.uk.communication.azure.com *.communication.microsoft.com *.trouter.teams.microsoft.com teams.microsoft.com/registrar/prod/v3/registrations prod.registrar.skype.com/v3/registrations wss://*.trouter.teams.microsoft.com *.events.data.microsoft.com; font-src 'self' ukpn.local hello.myfonts.net data: https://*.blob.core.windows.net https://*.tangentlabs.co.uk fonts.googleapis.com fonts.gstatic.com https://fonts.gstatic.com https://pfw-prod-ukwest-safespaceonline.azurewebsites.net/ https://api.reciteme.com https://ukpn-dev-cdn.tangentlabs.co.uk https://*.cdn.office.net; style-src 'self' 'unsafe-inline' ukpn.local https://*.blob.core.windows.net https://*.tangentlabs.co.uk fonts.googleapis.com https://fonts.googleapis.com https://api.reciteme.com https://ukpn-dev-cdn.tangentlabs.co.uk https://pfw-prod-ukwest-safespaceonline.azurewebsites.net oc-cdn-public-gbr.azureedge.net/livechatwidget/v2public/styles/LiveChatWidgetFrame.css; script-src 'self' 'unsafe-eval' ukpn.local https://*.go-mpulse.net 'unsafe-inline' https://*.blob.core.windows.net https://*.tangentlabs.co.uk https://cc.cdn.civiccomputing.com/9/cookieControl-9.x.min.js https://www.googletagmanager.com/ns.html www.googletagmanager.com cdnjs.cloudflare.com www.google-analytics.com script.hotjar.com static.hotjar.com http://widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js z.moatads.com https://translate.google.com/ https://translate.googleapis.com/ apis.google.com www.google.com www.gstatic.com maps.googleapis.com ajax.googleapis.com https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com *.googleusercontent.com blob: https://static.site24x7rum.eu https://widget.trustpilot.com https://t.sharethis.com https://platform-api.sharethis.com https://buttons-config.sharethis.com https://graph.facebook.com https://www.youtube.com https://www.linkedin.com/ https://s.ytimg.com https://platform.twitter.com https://connect.facebook.net https://api.reciteme.com https://stats.reciteme.com https://*.speechstream.net https://wikisum.texthelp.com/ https://ukpn-dev-cdn.tangentlabs.co.uk https://pfw-prod-ukwest-safespaceonline.azurewebsites.net https://ukpowernetworks.queue-it.net https://ukpowernetwork.queue-it.net https://static.queue-it.net/script/queueclient.min.js https://static.queue-it.net/script/queueconfigloader.min.js https://assets.queue-it.net cdn.botframework.com oc-cdn-public-gbr.azureedge.net/livechatwidget/scripts/LiveChatBootstrapper.js oc-cdn-public-gbr.azureedge.net/livechatwidget/v2scripts/LiveChatBootstrapper.js oc-cdn-public-gbr.azureedge.net https://grid.is; img-src 'self' data: https://api.umbraco.io https://media.umbraco.io https://img.youtube.com https://*.tangentlabs.co.uk https://pfw-prod-ukwest-safespaceonline.azurewebsites.net https://*.blob.core.windows.net www.google-analytics.com *.googletagmanager.com stats.g.doubleclick.net www.google.com/ads www.google.co.uk/ads https://translate.google.com maps.gstatic.com maps.googleapis.com https://www.google.com https://www.google.co.uk/ https://www.google.com/images/cleardot.gif https://www.gstatic.com fonts.googleapis.com apis.google.com https://*.googleapis.com https://*.gstatic.com *.google.com *.googleusercontent.com https://l.sharethis.com https://api.reciteme.com https://speechstreamv3-webservices-8.texthelp.com/ https://upload.wikimedia.org blob:; child-src 'self' https://www.googletagmanager.com/ns.html https://content.googleapis.com; frame-src 'self' https://powerupgames.z33.web.core.windows.net https://vars.hotjar.com https://powerupgames.z33.web.core.windows.net/hunt-the-hazards/story.html www.google.com *.google.com https://www.googletagmanager.com www.youtube.com www.linkedin.com https://widget.trustpilot.com http://t.sharethis.com https://platform-api.sharethis.com https://platform.twitter.com https://web.facebook.com/ https://www.facebook.com/ https://m.facebook.com/ https://api.reciteme.com https://*.speechstream.net web.powerva.microsoft.com https://956e469338e2e6898c68816e7d5d70.4d.environment.api.powerplatform.com https://122893fe7778e05ebe27d6a1abed5c.42.environment.api.powerplatform.com https://0f561d2ccae5e5c6b9552edc1c9164.5b.environment.api.powerplatform.com https://oc-cdn-public-gbr.azureedge.net/ https://comms.omnichannelengagementhub.com/ https://grid.is; object-src data:; worker-src blob:; media-src https://api.reciteme.com self https://*.speechstream.net data:; |
By using SecurityHeaders.info, you can quickly identify missing or misconfigured headers and take steps to secure your website, improving both security and user confidence.
This tool is widely used by developers, security professionals, and organizations to ensure their websites adhere to best practices in web security.
We also have another analytic tool that is used for identifying popularity metrics, general information about the business, finding similar products and competitors, and much more.
Watch it now at TrustRadar