HTTPS Enabled
content-security-policydefault-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.clarity.ms https://*.pure.cloud https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://maps.googleapis.com https://www.google.com https://www.gstatic.com https://bat.bing.com https://connect.facebook.net https://cdn.livechatinc.com https://js.salesloft.com https://cdn.callrail.com https://cdn.datasteam.io https://js-na2.hs-banner.com https://js-na2.hsforms.net https://js.hs-analytics.net https://nitroscripts.com https://js-na2.hs-scripts.com https://d10lpsik1i8c69.cloudfront.net https://static.hsappstatic.net https://241839045.fs1.hubspotusercontent-na2.net https://js-na2.hs-analytics.net https://www.youtube.com; script-src-elem 'self' 'unsafe-inline' https://*.hsforms.com https://*.clarity.ms https://*.pure.cloud https://js-na2.hsforms.net https://www.youtube.com https://cdn.callrail.com https://js-na2.hs-banner.com https://js.hs-analytics.net https://nitroscripts.com https://ws.zoominfo.com https://bat.bing.com https://js-na2.hs-scripts.com https://js.callrail.com https://cdn.livechatinc.com https://js.salesloft.com https://www.googletagmanager.com https://www.google.com https://*.bayalarm.com https://241839045.fs1.hubspotusercontent-na2.net https://cdn.datasteam.io https://d10lpsik1i8c69.cloudfront.net https://js.hsforms.net https://js.ipredictive.com https://static.hsappstatic.net https://www.google-analytics.com https://www.gstatic.com https://googleads.g.doubleclick.net https://maps.googleapis.com https://js-na2.hs-analytics.net https://connect.facebook.net https://yoast.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com https://d10lpsik1i8c69.cloudfront.net; style-src-elem 'self' 'unsafe-inline' https://d10lpsik1i8c69.cloudfront.net https://fonts.googleapis.com https://www.googletagmanager.com; style-src-attr 'unsafe-inline'; img-src 'self' data: https://*.clarity.ms https://www.google-analytics.com https://www.googletagmanager.com https://maps.gstatic.com https://*.googleapis.com https://www.facebook.com https://bat.bing.com https://stats.g.doubleclick.net https://forms-na2.hsforms.com https://s.w.org https://ad.ipredictive.com https://api.datasteam.io https://*.googlesyndication.com https://track-na2.hubspot.com https://d10lpsik1i8c69.cloudfront.net https://ad.doubleclick.net https://bayalarm.com https://*.bayalarm.com https://i.ytimg.com https://api.dtstmio.com https://googleads.g.doubleclick.net https://www.google.pt https://*.wpengine.com https://track.hubspot.com https://*.google.com https://*.googleadservices.com https://secure.gravatar.com; font-src 'self' data: https://fonts.gstatic.com https://s0.wp.com; connect-src 'self' https://*.clarity.ms wss://*.pure.cloud https://*.pure.cloud https://www.google-analytics.com https://stats.g.doubleclick.net https://*.google.com https://api.bayalarm.com https://cdn.livechatinc.com https://api.salesloft.com https://forms-na2.hsforms.com https://js.callrail.com https://googleads.g.doubleclick.net https://cdn.growthbook.io https://pagead2.googlesyndication.com https://settings.luckyorange.net https://www.googleadservices.com https://bat.bing.com wss://visitors.live https://ad.doubleclick.net https://ws.zoominfo.com wss://in.visitors.live https://api-preview.luckyorange.com https://forms.hsforms.com https://js-na2.hs-banner.com https://pubsub.googleapis.com https://to.getnitropack.com https://exceptions-na2.hubspot.com https://hubspot-forms-static-embed.s3.amazonaws.com https://maps.googleapis.com https://www.googletagmanager.com; media-src 'self' https://d10lpsik1i8c69.cloudfront.net; frame-src 'self' https://js-na2.hsforms.net https://*.pure.cloud https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://maps.google.com https://app-na2.hubspot.com https://ad.ipredictive.com https://11028703.fls.doubleclick.net https://forms-na2.hsforms.com https://www.googletagmanager.com; worker-src blob:; frame-ancestors 'self' https://app-na2.hubspot.com; form-action 'self' https://www.bayalarm.com https://forms-na2.hsforms.com; base-uri 'self'; report-uri https://bayalarm.report-uri.com/r/d/csp/enforceControls resources the browser can load. Prevents XSS.
x-content-type-optionsnosniffPrevents MIME type sniffing. Should be 'nosniff'.
x-frame-optionsSAMEORIGINControls framing. Use CSP frame-ancestors instead.
strict-transport-securitymax-age=63072000Forces HTTPS. Recommended: max-age=31536000; includeSubDomains
referrer-policyControls referrer info. Recommended: strict-origin-when-cross-origin
permissions-policyControls browser features. Recommended: camera=(), microphone=(), geolocation=()
cross-origin-opener-policyControls cross-origin window access. Recommended: same-origin
cross-origin-resource-policyControls cross-origin resource access. Recommended: same-origin
cross-origin-embedder-policyControls cross-origin embedding. Recommended: require-corp
cache-controlmax-age=600, must-revalidateCaching policy. Use no-store/private for sensitive pages.
x-powered-byShould be removed. Reveals server technology to attackers.
Missing: referrer-policy
Recommendation: Controls referrer info. Recommended: strict-origin-when-cross-origin
Missing: permissions-policy
Recommendation: Controls browser features. Recommended: camera=(), microphone=(), geolocation=()
Missing: cross-origin-opener-policy
Recommendation: Controls cross-origin window access. Recommended: same-origin
Missing: cross-origin-resource-policy
Recommendation: Controls cross-origin resource access. Recommended: same-origin
Missing: cross-origin-embedder-policy
Recommendation: Controls cross-origin embedding. Recommended: require-corp
Missing recommended header: referrer-policy
Recommendation: Review and fix this security issue