HTTP Headers for docker.com

Responds with HTTP 200 OK from nginx — 5 of 6 security headers present.

Domain to Check
200 OKhttps://www.docker.com/
Security Headers5/6
HSTS
CSP
X-Frame-Options
X-Content-Type-Options
Referrer-Policy
Permissions-Policy
All Response Headers (24)
accept-rangesbytes
age67234
cache-controlpublic, max-age=604800
connectionclose
content-encodinggzip
content-length109627
content-typetext/html; charset=UTF-8
dateFri, 24 Apr 2026 15:41:55 GMT
link<https://www.docker.com/wp-json/>; rel="https://api.w.org/", <https://www.docker.com/wp-json/wp/v2/pages/69521>; rel="alternate"; title="JSON"; type="application/json", <https://www.docker.com/>; rel=shortlink
permissions-policygeolocation=(), microphone=(), camera=(), fullscreen=(self), payment=()
referrer-policystrict-origin-when-cross-origin
servernginx
strict-transport-securitymax-age=31622400
varyAccept-Encoding, X-Language-Locale, Cookie, Cookie
via1.1 varnish, 1.1 varnish, 1.1 varnish, 1.1 varnish
x-cacheHIT, HIT, MISS, MISS
x-cache-hits7, 104, 0, 0
x-content-type-optionsnosniff
x-frame-optionsSAMEORIGIN
x-pantheon-styx-hostnamestyx-us-a-585b48f5c5-2nt6m
x-served-bycache-chi-kigq8000107-CHI, cache-iad-kcgs7200048-IAD, cache-iad-kcgs7200048-IAD, cache-iad-kcgs7200048-IAD
x-styx-req-id9423136b-3f57-11f1-9a0d-e627cff6bed0
x-timerS1777045316.716433,VS0,VE6
x-xss-protection1; mode=block
Related
HTTP Headers for docker.com — nginx | ProfileMyIP