HTTPS Enabled
content-security-policyscript-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.zohoapis.in https://*.zohoflow.com https://*.zohocorppublic.in https://*.zohostatic.jp https://*.zohopublic.jp https://maillist-manage.com https://www.buzzsprout.com https://*.nimbuspop.com https://*.zoho.com https://*.google.com https://cdnjs.cloudflare.com https://platform.twitter.com https://player.vimeo.com https://*.maillist-manage.com https://*.manageengine.com https://*.pagesense.io https://*.zapier.com https://*.zoho.com.au https://*.zoho.eu https://*.zoho.in https://*.zoho.jp https://*.zoho.sa https://*.zohocdn.com https://*.zohocloud.ca https://*.zohostatic.com https://*.zohowebstatic.com https://cdn.ampproject.org https://cdn.checkhq.com https://fast.wistia.com https://run.pstmn.io https://www.youtube.com https://www.youtube-nocookie.com https://*.zoho.ae https://*.zohopublic.com https://*.zohopublic.in https://*.zohopublic.eu https://*.zohosalesiq.com https://*.zohocorp.com https://*.zohoexternal.in https://*.zohoexternal.com https://*.zoho.uk https://*.catalystserverless.in https://*.catalystserverless.com https://*.zohobookings.com https://*.zohobookings.eu https://*.zohobookings.in https://*.zohocdn.com.cn https://*.scoreapp.com https://*.jsdelivr.net https://*.maillist-manage.in https://*.gstatic.com https://*.zoho.sg;connect-src 'self' blob: wss://*.elevenlabs.io wss://*.rtc.elevenlabs.io https://*.elevenlabs.io https://esm.sh https://*.catalystserverless.jp https://*.development.catalystappsail.in https://*.zohorecruit.in https://*.zohorecruit.eu https://*.zoho.sg https://*.zohopublic.jp https://*.zohostratus.com https://*.zoho.in https://*.zoho.com https://*.zoho.com.au https://*.zoho.eu https://*.zoho.jp https://*.zohocloud.ca https://*.zoho.uk https://*.zoho.sa https://*.zoho.ae https://*.zohosalesiq.com https://*.zohocorp.com https://*.zohoexternal.in https://*.zohoexternal.com https://*.zohostatic.com https://*.wistia.com https://*.maillist-manage.com https://*.maillist-manage.in https://*.maillist-manage.eu https://*.catalystserverless.in https://*.catalystserverless.com https://*.zapier.com https://api.github.com https://player.vimeo.com https://twitter.com https://*.zohocdn.com https://*.zohopublic.com https://*.zohopublic.in wss://*.zohopublic.jp wss://*.zohopublic.in wss://*.zohopublic.eu wss://vts.zohopublic.com https://*.zohowebstatic.com https://*.zohobookings.com https://*.zohobookings.eu https://*.zohobookings.in https://*.zohocdn.com.cn https://*.zohopublic.eu https://*.scoreapp.com https://*.cdn.pagesense.io https://*.zohoportal.in https://*.cdn-in.pagesense.io https://*.jsdelivr.net;Controls resources the browser can load. Prevents XSS.
x-content-type-optionsnosniffPrevents MIME type sniffing. Should be 'nosniff'.
x-frame-optionsControls framing. Use CSP frame-ancestors instead.
strict-transport-securitymax-age=64072000; includeSubDomains; preloadForces HTTPS. Recommended: max-age=31536000; includeSubDomains
referrer-policyControls referrer info. Recommended: strict-origin-when-cross-origin
permissions-policyControls browser features. Recommended: camera=(), microphone=(), geolocation=()
cross-origin-opener-policyControls cross-origin window access. Recommended: same-origin
cross-origin-resource-policyControls cross-origin resource access. Recommended: same-origin
cross-origin-embedder-policyControls cross-origin embedding. Recommended: require-corp
cache-controlno-cacheCaching policy. Use no-store/private for sensitive pages.
x-powered-byShould be removed. Reveals server technology to attackers.
Missing: x-frame-options
Recommendation: Controls framing. Use CSP frame-ancestors instead.
Missing: referrer-policy
Recommendation: Controls referrer info. Recommended: strict-origin-when-cross-origin
Missing: permissions-policy
Recommendation: Controls browser features. Recommended: camera=(), microphone=(), geolocation=()
Missing: cross-origin-opener-policy
Recommendation: Controls cross-origin window access. Recommended: same-origin
Missing: cross-origin-resource-policy
Recommendation: Controls cross-origin resource access. Recommended: same-origin
Missing: cross-origin-embedder-policy
Recommendation: Controls cross-origin embedding. Recommended: require-corp
Missing recommended header: referrer-policy
Recommendation: Review and fix this security issue