CSP is not configured. It helps prevent XSS attacks and content injection.
ℹ 🔵Missing X-Frame-Options
The site can be embedded in iframes by third parties (clickjacking risk).
HTTP Status Code200 HTTP VersionHTTP/1.1 HTTPS✔ Available IP Address89.46.109.33 Server Softwarearuba-proxy Compressiongzip ℹ 🔵Missing Content Security PolicyCSP is not configured. It helps prevent XSS attacks and content injection. ℹ 🔵Missing X-Frame-OptionsThe site can be embedded in iframes by third parties (clickjacking risk).
Redirect Chain
#
URL
HTTP Status Code
Status
1
https://accolade.it:443
301
HTTP/2 301
2
http://www.accolade.it/
200
HTTP/1.1 200 OK
#1 URLhttps://accolade.it:443 HTTP Status Code301 StatusHTTP/2 301 #2 URLhttp://www.accolade.it/ HTTP Status Code200 StatusHTTP/1.1 200 OK
Performance
DNS Lookup
104 ms
TCP Connect
128.6 ms
TLS Handshake
~80 ms
Time To First Byte (TTFB)
213.3 ms
Content Download
0.1 ms
Total Response Time
213.4 ms
DNS Lookup104 ms TCP Connect128.6 ms TLS Handshake~80 ms Time To First Byte (TTFB)213.3 ms Content Download0.1 ms Total Response Time213.4 ms
Security
HTTPS
✔ Enabled
HSTS
✔ max-age=31536000; includeSubDomains; preload
CSP
⚠ Not configured
X-Frame-Options
⚠ Not configured
X-Content-Type-Options
⚠ Not configured
HTTP/2
⚠ HTTP/1.1
HTTPS✔ Enabled HSTS✔ max-age=31536000; includeSubDomains; preload CSP⚠ Not configured X-Frame-Options⚠ Not configured X-Content-Type-Options⚠ Not configured HTTP/2⚠ HTTP/1.1