securityheaders.io

https://securityheaders.io· First analyzed 22 May 2026· Updated 22 May 2026

Export

securityheaders.io

Mobile

Sponsored

Hosting Provider

Cloudflare

cloudflare.com

IP Address

172.67.196.107

Site Location

🇨🇦 Canadavia ip

Server Location

🇨🇦 Toronto, Canada

ASN

AS13335

Organization

Cloudflare, Inc.

Server

Cloudflare

CDN

Cloudflare

WAF

Cloudflare

Nameservers

adrian.ns.cloudflare.com.karl.ns.cloudflare.com.

Performance

Core Web Vitals

Weight

First Contentful Paint

745 ms10%

Speed Index

968 ms10%

Largest Contentful Paint

—25%

Total Blocking Time

0.0 ms30%

Cumulative Layout Shift

0.00025%

84 KB

21 requests

0–49

50–89

90–100

Architecture Stack

Monolithic

⚙️ SSR

Infrastructure

Hosting

Cloudflare

CDN

Cloudflare

Technology Stack

7 Technologies Detected

Libraries

CSS Frameworks

Icon Libraries

Analytics

Tag Managers

CDN

Languages

SEO Analysis

D57/100

Meta Tags8/15

Content6/12

Headings3/8

Technical13/25

E-E-A-T3/7

Images4/7

Links5/5

URL5/5

Social3/5

Freshness0/4

Mobile4/4

Indexability3/3

securityheaders.iosecurityheaders.io

Analyse your HTTP response headers

Quickly and easily assess the security of your HTTP response headers

Title Length34 chars

Recommended: 50-60 chars (~208px / 580px)

Description Length68 chars

Recommended: 120-160 chars

Issues (1)

• Missing H1 tag — every page should have exactly one H1

11 issues found

Upgrade to view details

Crawlability

Sitemap

robots.txt

2 rules

Allows all crawlers

Local SEO

Local Search Readiness

5/100

Poor

2 13 2

This site doesn't appear to be a local business. Local SEO signals are optional for non-local websites.

Sponsored

AI & LLM Readiness

F35/100

Bot Access

20/25

Machine Read.

2/25

Schema Data

0/25

Citation

13/25

AI Bot Access

14/14 accessible

AI Search

OAI-SearchBot

PerplexityBot

Claude-SearchBot

Gemini-Deep-Research

DuckAssistBot

Training

GPTBot

ClaudeBot

Google-Extended

Meta-ExternalAgent

Bytespiderinfo

Amazonbot

Applebot-Extended

CCBotinfo

Fetch

ChatGPT-User

Machine Readability

llms.txt

llms-full.txt

Semantic HTML

Heading Hierarchy

nav

Text ratio:4%

Words:123

Token eff.:Too Short

Sections/1K:8.1

Depth:1/5

Structured Data

No Schema

Citation Readiness

Opening Summary

Descriptive Headingsavg 4w

Canonical URL

Open Graph3/3

Twitter Card0/3

Language Tag

Publish Date

Author Info

Lists

Tables

TL;DR / Summary

About Page Link

Recommendations (10)

AI readiness recommendation preview...

Upgrade to view recommendations

Sponsored

Accessibility

WCAG 2.1 Compliance

Evaluates how accessible your website is for users with disabilities, based on WCAG 2.1 guidelines. Checks images, forms, keyboard navigation, ARIA roles, and color contrast.

74/100

Passed

Critical

Warnings

Images & Alt Text

20/20

Checks if images have descriptive alt text for screen readers and visually impaired users.

Semantic Structure

11/20

Evaluates proper use of HTML5 semantic elements (header, nav, main, footer) and heading hierarchy.

Forms & Inputs

15/15

Verifies form fields have labels, error messages are clear, and inputs are properly associated.

Color & Contrast

15/15

Tests text-to-background color contrast ratios against WCAG AA/AAA minimum requirements.

Keyboard & Focus

9/15

Ensures all interactive elements are reachable and operable via keyboard (tab, enter, escape).

ARIA & Roles

4/15

Checks correct use of WAI-ARIA attributes (roles, states, properties) for assistive technologies.

2 recommendations

•Accessibility recommendation preview...

Upgrade to view recommendations

Carbon Footprint

SWDM v4 · Eco-Score

Carbon emissions estimated using the Sustainable Web Design Model v4 (SWDM v4). Factors in data center, network, and device energy across new and returning visitors. Grade thresholds based on HTTP Archive percentiles.

71/100

A+

9 mg

CO₂e / view

84.2 KB

Page Weight

95%

Cleaner Than

New Visitor

10 mg

Returning (cached)

5 mg

Annual (10K/mo)

1.0 kg

Emission Segments

Data Center

<0.001 g

Network

3 mg

Device

6 mg

Resource Breakdown

JavaScript

58.6 KB

Images

5.3 KB

CSS

16.8 KB

HTML

3.5 KB

Green Hosting Verified

Cloudflare

GWF Verified

2 recommendations

•Carbon footprint recommendation preview...

Upgrade to view recommendations

A+

Security Score

91%Excellent

Interactive

HTTPS

WAF

55d

Certificate Details

Type

Domain Validated (DV)

Certificate Authority

Google Trust Services

Key Algorithm

ECDSA (secp256r1) (256 bit)

Signature

ECDSA with SHA-256

TLS Version

TLSv1.3

HTTP Protocol

HTTP/2

Valid From

17.04.2026

Valid Until

16.07.2026

OCSP Stapling

Enabled

Subject Alternative Names (2)

securityheaders.com*.securityheaders.com

SHA-256 Fingerprint

F8:80:00:7D:53:62:3C:E9:E1:9C:7E:4B:7A:85:31:C6:F4:32:60:07...

Upgrade to view header details

HTTP Headers

Developer Console

access-control-allow-origin

cache-control

🟡 60s(public, max-age=60)

cf-cache-status

DYNAMIC

cf-ray

9ff7cf5ddc7546dc-EWR

content-encoding

📦 Gzip(gzip)

content-security-policy

default-src 'self'; script-src 'self' 'sha256-MNB+aPkufy/7Tu...

Good Warning Issue

Email Infrastructure

Fastmail

Score

SPF

DKIM

DMARC

DMARC Policy

Quarantine (Moderate)

MX Records (2)

in1-smtp.messagingengine.com

in2-smtp.messagingengine.com

Domain Information

securityheaders.io

Domain Age

11y 3m

Created

01.02.2015

Expires

01.02.2027

Last Updated

07.01.2026

Registrar

Cloudflare, Inc

DNSSEC

Not Enabled

Mobile Compatibility

Viewport & Responsive Test

Tests how well your website works on mobile devices. Checks viewport configuration, responsive layout, touch targets, font readability, and simulates rendering across different screen sizes.

55/100

Mobile Friendly1 breakpoint

Viewport Meta

The viewport meta tag tells mobile browsers how to scale the page. Without it, mobile devices render at desktop width.

Responsive Design

Uses CSS media queries or flexible layouts to adapt content to different screen sizes automatically.

Touch Icons

Apple touch icons and favicons displayed when users add the site to their home screen on mobile devices.

Readable Font Size

Base font size should be at least 16px on mobile to ensure text is readable without zooming.

Relative Units

Using em, rem, %, or vw instead of fixed px values allows content to scale properly across screen sizes.

No H-Scroll Risk

No elements wider than the viewport that would cause horizontal scrolling on mobile devices.

Tap Targets OK

Interactive elements (buttons, links) are at least 48x48px with enough spacing to prevent accidental taps.

No Fixed Widths

No elements with fixed pixel widths that could overflow on smaller screens and break the layout.

Viewport

user-scalable=yes,width=device-width,initial-scale=1

4 recommendations

•Mobile compatibility recommendation preview...

Upgrade to view recommendations

Typography & Readability

Noto Sans

WCAG Partial

57/100

Readability

/30

19/30

15px · LH 1.65

Hierarchy

/20

6/20

WCAG

/25

17/25

2.03:1 min contrast

Performance

/25

15/25

1 font · 1 req

Heading Font

Noto Sans

Sans

Body Font

Noto Sans

Sans15px

Contrast Ratio

2.03:1

21 issues

Reading Comfort

Single Font Family

center aligned

41px

⚠️ Small text: 15px may strain on mobile. Use ≥16px for WCAG compliance.

⚠️ Hard to read: Flesch score 34/100. Simplify sentences for wider reach.

⚠️ Partial contrast: 21 elements below WCAG AA threshold (min 2.0:1).

❌ Missing H1: Every page should have exactly one H1 element for SEO and accessibility.

✅ Lean font stack: 1 font families keeps load times fast.

⚠️ Missing font-display: swap — users may see invisible text while fonts load (FOIT).

Buy on MyFontsFlesch 34

Color Palette

5 unique colors

Light

#eff8ff

Background· 53.000000000000014%

#3a71d8

Primary· 37.099999999999994%

#cedbe4

Secondary· 5.6%

#7093d1

Accent· 3.6%

#3666c4

Accent· 0.8%

Business & Marketing Stack

1 Tools Detected

Growing

Behavior Analytics

Google Tag ManagerFree

User behavior and product analytics

Sponsored

Scripts & Styles

16 Resources

Scripts

Styles

Async

Defer

Top Script Sources

local(5)googletagmanager.com(2)js(1)static.cloudflareinsights.com(1)

Website Identity

securityheaders.io

info@securityheaders.com

11 years old

Location detected: 🇨🇦 Canadavia ip

Cloudflare, Inc📧 Fastmailen

Social Profiles

Facebook X (Twitter)

Sponsored

Last analyzed: 22 May 2026 at 00:47

Historical Analysis & Change Tracking