HTTP Headers for anthropic.com

Responds with HTTP 200 OK from cloudflare — 2 of 6 security headers present.

URL to Check
200 OKhttps://www.anthropic.com/
Security Headers2/6
HSTS
CSP
X-Frame-Options
X-Content-Type-Options
Referrer-Policy
Permissions-Policy
All Response Headers (19)
age65424
alt-svch3=":443"; ma=86400
cf-cache-statusDYNAMIC
cf-ray9f1452d0eb740bfe-IAD
connectionclose
content-encodingbr
content-security-policydefault-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.intellimize.co https://cdnjs.cloudflare.com https://d3e54v103j8qbb.cloudfront.net https://cdn.prod.website-files.com https://hubspotonwebflow.com https://www.googletagmanager.com https://a-cdn.anthropic.com https://connect.facebook.net https://www.youtube.com https://cdn.jsdelivr.net https://cdn.finsweet.com https://maps.googleapis.com https://js.hsforms.net https://player.vimeo.com; style-src 'self' 'unsafe-inline' https://cdn.prod.website-files.com https://cdnjs.cloudflare.com https://fonts.googleapis.com; img-src 'self' data: https://cdn.sanity.io https://www-cdn.anthropic.com https://cdn.prod.website-files.com https://img.youtube.com https://i.ytimg.com https://www.facebook.com https://maps.googleapis.com https://maps.gstatic.com https://www.googletagmanager.com https://forms-na1.hsforms.com; frame-src 'self' https://www.youtube-nocookie.com https://www.youtube.com https://cdn.embedly.com https://*.intellimizeio.com https://anthropic.swoogo.com https://*.hsforms.com https://*.hubspot.com; connect-src 'self' blob: https://cdn.intellimize.co https://api.intellimize.co https://log.intellimize.co https://cdn.sanity.io https://links.iterable.com https://a-cdn.anthropic.com https://a-api.anthropic.com https://www.facebook.com https://www.google-analytics.com https://cdn.prod.website-files.com https://hubspotonwebflow.com https://maps.googleapis.com https://vimeo.com https://www.googletagmanager.com https://code.claude.com https://forms.hsforms.com https://hubspot-forms-static-embed.s3.amazonaws.com https://cdnjs.cloudflare.com https://www.gstatic.com; media-src 'self' https://cdn.sanity.io; worker-src 'self' blob:; font-src 'self' data: https://cdn.prod.website-files.com https://fonts.gstatic.com; object-src 'none'; frame-ancestors 'self'; base-uri 'self'
content-typetext/html; charset=utf-8
dateFri, 24 Apr 2026 10:11:22 GMT
last-modifiedThu, 23 Apr 2026 16:00:57 GMT
servercloudflare
set-cookie__cf_bm=7OSuTj1i3PO2OptuSARHEO3P3ESJvswYEN1vyYW9Y7Q-1777025482.3840065-1.0.1.1-uqBcai_cRNtKe6X4b80HGbFN.GqP4P5UwW_y2vm8mTK.4vhHcq6FSFjXwrdUDTPtwWEzg4nb.QZGnrIoxADeYPKSyal4NR0RHswnDYnweMuF.1Yh6nv4BsAEcm0bEm2M; HttpOnly; Secure; Path=/; Domain=anthropic.com; Expires=Fri, 24 Apr 2026 10:41:22 GMT
strict-transport-securitymax-age=3600
surrogate-controlmax-age=2147483647
surrogate-keywebsite.anthropic.com 67ce28cfec624e2b733f8a52 pageId:67f55a9666b2ae2332f5f893
varyAccept-Encoding
x-lambda-id9083356e-cc17-4457-a604-6b8a1fe7d3e3
x-wf-page-idZ/ValmayriMy9fiT
x-wf-regionus-east-1
Related
HTTP Headers for anthropic.com — cloudflare | ProfileMyIP