HTTP Headers for bing.com

Responds with HTTP 200 OK — 4 of 6 security headers present.

URL to Check
200 OKhttps://www.bing.com/?toWww=1&redig=FB49B52515B3481CAB788E96820B60ED
Security Headers4/6
HSTS
CSP
X-Frame-Options
X-Content-Type-Options
Referrer-Policy
Permissions-Policy
All Response Headers (17)
alt-svch3=":443"; ma=93600
cache-controlprivate
connectionclose
content-encodingbr
content-length0
content-security-policyscript-src https: 'strict-dynamic' 'report-sample' 'wasm-unsafe-eval' 'nonce-nq1cywTXDt2M8b9/Ymxs/xLCKzw8PpXVawEd7NhR3Xk='; base-uri 'self';
content-typetext/html; charset=utf-8
dateFri, 24 Apr 2026 10:08:21 GMT
p3pCP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
permissions-policyunload=()
set-cookie_HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyNi0wNC0yNFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIlRucyI6MCwiRGZ0IjpudWxsLCJNdnMiOjAsIkZsdCI6MCwiSW1wIjoxLCJUb2JuIjowfQ==; domain=.bing.com; expires=Mon, 24-Apr-2028 10:08:21 GMT; path=/
strict-transport-securitymax-age=31536000; includeSubDomains; preload
useragentreductionoptoutA7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
varyAccept-Encoding
x-cdn-traceid0.95721102.1777025301.b09b78
x-eventid69eb411572b3431aa8d83e945b708a5f
x-frame-optionsSAMEORIGIN
Related
HTTP Headers for bing.com | ProfileMyIP