Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 15.197.167.90 |
| Server Software | Netlify |
| Compression | gzip |
|
ℹ 🔵 Missing Content Security Policy | CSP is not configured. It helps prevent XSS attacks and content injection. |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 15.197.167.90
Server Software Netlify
Compression gzip
ℹ 🔵 Missing Content Security Policy CSP is not configured. It helps prevent XSS attacks and content injection.
Redirect Chain
| # | URL | HTTP Status Code | Status |
| 1 | https://heap.io:443 | 301 | HTTP/2 301 |
| 2 | https://www.heap.io/ | 200 | HTTP/2 200 |
#1 URL https://heap.io:443
HTTP Status Code 301
Status HTTP/2 301
#2 URL https://www.heap.io/
HTTP Status Code 200
Status HTTP/2 200
Performance
| DNS Lookup | 38.9 ms |
| TCP Connect | 48 ms |
| TLS Handshake | 13.3 ms |
| Time To First Byte (TTFB) | 71 ms |
| Content Download | 15.8 ms |
| Total Response Time | 86.8 ms |
DNS Lookup 38.9 ms
TCP Connect 48 ms
TLS Handshake 13.3 ms
Time To First Byte (TTFB) 71 ms
Content Download 15.8 ms
Total Response Time 86.8 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=31536000; includeSubDomains |
| CSP | ⚠ Not configured |
| X-Frame-Options | ✔ SAMEORIGIN |
| X-Content-Type-Options | ✔ nosniff |
| Referrer Policy | strict-origin-when-cross-origin |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=31536000; includeSubDomains
CSP ⚠ Not configured
X-Frame-Options ✔ SAMEORIGIN
X-Content-Type-Options ✔ nosniff
Referrer Policy strict-origin-when-cross-origin
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
| Title | Heap - Better Insights. Faster. | Heap |
| Meta Description | Heap by Contentsquare is the only digital insights platform that shows everything users do on your site, revealing the "unknown unknowns" that stay invisible with other tools. |
| Canonical | https://www.heap.io/ |
| Open Graph Title | Heap - Better Insights. Faster. |
| Open Graph Description | Heap by Contentsquare is the only digital insights platform that shows everything users do on your site, revealing the "unknown unknowns" that stay invisible with other tools. |
| Open Graph Image | https://images.ctfassets.net/jicu8fwm4fvs/57SlD3uXZskS7cH... |
| Twitter Card | summary_large_image |
Title Heap - Better Insights. Faster. | Heap Meta Description Heap by Contentsquare is the only digital insights platform that shows everything users do on your site, revealing the "unknown unknowns" that stay invisible with other tools. Canonical https://www.heap.io/ Open Graph Title Heap - Better Insights. Faster. Open Graph Description Heap by Contentsquare is the only digital insights platform that shows everything users do on your site, revealing the "unknown unknowns" that stay invisible with other tools. Open Graph Image https://images.ctfassets.net/jicu8fwm4fvs/57SlD3uXZskS7cH... Twitter Card summary_large_image Detected Technologies
| Technology | React Google Analytics Google Tag Manager Next.js Hotjar |
Technology React Google Analytics Google Tag Manager Next.js Hotjar
HTTP Headers
| Accept-ranges
| bytes |
| Access-control-allow-origin
| * |
| Age
| 19649 |
| Cache-control
| public,max-age=0,must-revalidate |
| Cache-status
| "Netlify Edge"; hit; ttl=31516352 |
| Content-encoding
| gzip |
| Content-security-policy-report-only
| default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.cookielaw.org https://optly.heap.io https://www.googleoptimize.com https://www.googletagmanager.com https://cdn.us.heap-api.com https://marketo.clearbit.com https://*.wistia.net https://js.chilipiper.com https://js.driftt.com https://*.clearbit.com https://app-ab33.marketo.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.cookielaw.org https://*.ctfassets.net; img-src 'self' data: https://*.ctfassets.net https://www.google-analytics.com https://www.googletagmanager.com https://*.wistia.net https://heapanalytics.com https://*.clearbit.com https://*.doubleclick.net; connect-src 'self' https://*.contentful.com https://*.heap-api.com https://heapanalytics.com https://www.google-analytics.com https://*.wistia.net https://*.doubleclick.net https://*.cookielaw.org https://app-ab33.marketo.com; font-src 'self' data: https://fonts.gstatic.com; frame-src 'self' https://*.wistia.net https://*.marketo.com https://*.chilipiper.com; worker-src 'self' blob:; manifest-src 'self'; base-uri 'self'; form-action 'self' https://*.marketo.com; frame-ancestors 'self'; media-src 'self' https://*.wistia.net blob:; object-src 'none' |
| Content-type
| text/html; charset=UTF-8 |
| Date
| Thu, 20 Aug 2026 00:12:37 GMT |
| Etag
| "70e0dfd0e2932e051fd5af8e2dd6549a-ssl-df" |
| Netlify-vary
| cookie=__next_preview_data:presence|__prerender_bypass:presence |
| Permission-policy
| accelerometer=(), autoplay=(*), camera=(), clipboard-write=(self), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), usb=(), xr-spatial-tracking=() |
| Referrer-policy
| strict-origin-when-cross-origin |
| Server
| Netlify |
| Strict-transport-security
| max-age=31536000; includeSubDomains |
| Vary
| Accept-Encoding |
| X-content-type-options
| nosniff |
| X-frame-options
| SAMEORIGIN |
| X-nf-request-id
| 01M0E86F52T8XTG6NJK85BXDQ4 |
| Content-length
| 52112 |
Meta Tags
| Viewport | width=device-width, initial-scale=1 |
| Description | Heap by Contentsquare is the only digital insights platform that shows everything users do on your site, revealing the "unknown unknowns" that stay invisible with other tools. |
| Split-test-data | nav-demo-test-control |
| Next-head-count | 26 |
Accept-ranges bytes
Access-control-allow-origin *
Age 19649
Cache-control public,max-age=0,must-revalidate
Cache-status "Netlify Edge"; hit; ttl=31516352
Content-encoding gzip
Content-security-policy-report-only default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.cookielaw.org https://optly.heap.io https://www.googleoptimize.com https://www.googletagmanager.com https://cdn.us.heap-api.com https://marketo.clearbit.com https://*.wistia.net https://js.chilipiper.com https://js.driftt.com https://*.clearbit.com https://app-ab33.marketo.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.cookielaw.org https://*.ctfassets.net; img-src 'self' data: https://*.ctfassets.net https://www.google-analytics.com https://www.googletagmanager.com https://*.wistia.net https://heapanalytics.com https://*.clearbit.com https://*.doubleclick.net; connect-src 'self' https://*.contentful.com https://*.heap-api.com https://heapanalytics.com https://www.google-analytics.com https://*.wistia.net https://*.doubleclick.net https://*.cookielaw.org https://app-ab33.marketo.com; font-src 'self' data: https://fonts.gstatic.com; frame-src 'self' https://*.wistia.net https://*.marketo.com https://*.chilipiper.com; worker-src 'self' blob:; manifest-src 'self'; base-uri 'self'; form-action 'self' https://*.marketo.com; frame-ancestors 'self'; media-src 'self' https://*.wistia.net blob:; object-src 'none'
Content-type text/html; charset=UTF-8
Date Thu, 20 Aug 2026 00:12:37 GMT
Etag "70e0dfd0e2932e051fd5af8e2dd6549a-ssl-df"
Netlify-vary cookie=__next_preview_data:presence|__prerender_bypass:presence
Permission-policy accelerometer=(), autoplay=(*), camera=(), clipboard-write=(self), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), usb=(), xr-spatial-tracking=()
Referrer-policy strict-origin-when-cross-origin
Server Netlify
Strict-transport-security max-age=31536000; includeSubDomains
Vary Accept-Encoding
X-content-type-options nosniff
X-frame-options SAMEORIGIN
X-nf-request-id 01M0E86F52T8XTG6NJK85BXDQ4
Content-length 52112
