Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 15.197.167.90 |
| Server Software | Netlify |
| Compression | gzip |
|
ℹ 🔵 Missing Content Security Policy | CSP is not configured. It helps prevent XSS attacks and content injection. |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 15.197.167.90
Server Software Netlify
Compression gzip
ℹ 🔵 Missing Content Security Policy CSP is not configured. It helps prevent XSS attacks and content injection.
Redirect Chain
| # | URL | HTTP Status Code | Status |
| 1 | https://heap.io:443 | 301 | HTTP/2 301 |
| 2 | https://www.heap.io/ | 200 | HTTP/2 200 |
#1 URL https://heap.io:443
HTTP Status Code 301
Status HTTP/2 301
#2 URL https://www.heap.io/
HTTP Status Code 200
Status HTTP/2 200
Performance
| DNS Lookup | 22.6 ms |
| TCP Connect | 32.5 ms |
| TLS Handshake | 14.7 ms |
| Time To First Byte (TTFB) | 57.5 ms |
| Content Download | 20.3 ms |
| Total Response Time | 77.9 ms |
DNS Lookup 22.6 ms
TCP Connect 32.5 ms
TLS Handshake 14.7 ms
Time To First Byte (TTFB) 57.5 ms
Content Download 20.3 ms
Total Response Time 77.9 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=31536000; includeSubDomains |
| CSP | ⚠ Not configured |
| X-Frame-Options | ✔ SAMEORIGIN |
| X-Content-Type-Options | ✔ nosniff |
| Referrer Policy | strict-origin-when-cross-origin |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=31536000; includeSubDomains
CSP ⚠ Not configured
X-Frame-Options ✔ SAMEORIGIN
X-Content-Type-Options ✔ nosniff
Referrer Policy strict-origin-when-cross-origin
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
| Title | Heap - Better Insights. Faster. | Heap |
| Meta Description | Heap by Contentsquare is the only digital insights platform that shows everything users do on your site, revealing the "unknown unknowns" that stay invisible with other tools. |
| Canonical | https://www.heap.io/ |
| Open Graph Title | Heap - Better Insights. Faster. |
| Open Graph Description | Heap by Contentsquare is the only digital insights platform that shows everything users do on your site, revealing the "unknown unknowns" that stay invisible with other tools. |
| Open Graph Image | https://images.ctfassets.net/jicu8fwm4fvs/57SlD3uXZskS7cH... |
| Twitter Card | summary_large_image |
Title Heap - Better Insights. Faster. | Heap Meta Description Heap by Contentsquare is the only digital insights platform that shows everything users do on your site, revealing the "unknown unknowns" that stay invisible with other tools. Canonical https://www.heap.io/ Open Graph Title Heap - Better Insights. Faster. Open Graph Description Heap by Contentsquare is the only digital insights platform that shows everything users do on your site, revealing the "unknown unknowns" that stay invisible with other tools. Open Graph Image https://images.ctfassets.net/jicu8fwm4fvs/57SlD3uXZskS7cH... Twitter Card summary_large_image Detected Technologies
| Technology | React Google Analytics Google Tag Manager Next.js Hotjar |
Technology React Google Analytics Google Tag Manager Next.js Hotjar
HTTP Headers
| Accept-ranges
| bytes |
| Access-control-allow-origin
| * |
| Age
| 12304 |
| Cache-control
| public,max-age=0,must-revalidate |
| Cache-status
| "Netlify Edge"; hit; ttl=31523697 |
| Content-encoding
| gzip |
| Content-security-policy-report-only
| default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.cookielaw.org https://optly.heap.io https://www.googleoptimize.com https://www.googletagmanager.com https://cdn.us.heap-api.com https://marketo.clearbit.com https://*.wistia.net https://js.chilipiper.com https://js.driftt.com https://*.clearbit.com https://app-ab33.marketo.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.cookielaw.org https://*.ctfassets.net; img-src 'self' data: https://*.ctfassets.net https://www.google-analytics.com https://www.googletagmanager.com https://*.wistia.net https://heapanalytics.com https://*.clearbit.com https://*.doubleclick.net; connect-src 'self' https://*.contentful.com https://*.heap-api.com https://heapanalytics.com https://www.google-analytics.com https://*.wistia.net https://*.doubleclick.net https://*.cookielaw.org https://app-ab33.marketo.com; font-src 'self' data: https://fonts.gstatic.com; frame-src 'self' https://*.wistia.net https://*.marketo.com https://*.chilipiper.com; worker-src 'self' blob:; manifest-src 'self'; base-uri 'self'; form-action 'self' https://*.marketo.com; frame-ancestors 'self'; media-src 'self' https://*.wistia.net blob:; object-src 'none' |
| Content-type
| text/html; charset=UTF-8 |
| Date
| Wed, 19 Aug 2026 22:10:12 GMT |
| Etag
| "70e0dfd0e2932e051fd5af8e2dd6549a-ssl-df" |
| Netlify-vary
| cookie=__next_preview_data:presence|__prerender_bypass:presence |
| Permission-policy
| accelerometer=(), autoplay=(*), camera=(), clipboard-write=(self), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), usb=(), xr-spatial-tracking=() |
| Referrer-policy
| strict-origin-when-cross-origin |
| Server
| Netlify |
| Strict-transport-security
| max-age=31536000; includeSubDomains |
| Vary
| Accept-Encoding |
| X-content-type-options
| nosniff |
| X-frame-options
| SAMEORIGIN |
| X-nf-request-id
| 01M0E16A2ABYDPRJN8RHMR5QFF |
| Content-length
| 52112 |
Meta Tags
| Viewport | width=device-width, initial-scale=1 |
| Description | Heap by Contentsquare is the only digital insights platform that shows everything users do on your site, revealing the "unknown unknowns" that stay invisible with other tools. |
| Split-test-data | nav-demo-test-control |
| Next-head-count | 26 |
Accept-ranges bytes
Access-control-allow-origin *
Age 12304
Cache-control public,max-age=0,must-revalidate
Cache-status "Netlify Edge"; hit; ttl=31523697
Content-encoding gzip
Content-security-policy-report-only default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.cookielaw.org https://optly.heap.io https://www.googleoptimize.com https://www.googletagmanager.com https://cdn.us.heap-api.com https://marketo.clearbit.com https://*.wistia.net https://js.chilipiper.com https://js.driftt.com https://*.clearbit.com https://app-ab33.marketo.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.cookielaw.org https://*.ctfassets.net; img-src 'self' data: https://*.ctfassets.net https://www.google-analytics.com https://www.googletagmanager.com https://*.wistia.net https://heapanalytics.com https://*.clearbit.com https://*.doubleclick.net; connect-src 'self' https://*.contentful.com https://*.heap-api.com https://heapanalytics.com https://www.google-analytics.com https://*.wistia.net https://*.doubleclick.net https://*.cookielaw.org https://app-ab33.marketo.com; font-src 'self' data: https://fonts.gstatic.com; frame-src 'self' https://*.wistia.net https://*.marketo.com https://*.chilipiper.com; worker-src 'self' blob:; manifest-src 'self'; base-uri 'self'; form-action 'self' https://*.marketo.com; frame-ancestors 'self'; media-src 'self' https://*.wistia.net blob:; object-src 'none'
Content-type text/html; charset=UTF-8
Date Wed, 19 Aug 2026 22:10:12 GMT
Etag "70e0dfd0e2932e051fd5af8e2dd6549a-ssl-df"
Netlify-vary cookie=__next_preview_data:presence|__prerender_bypass:presence
Permission-policy accelerometer=(), autoplay=(*), camera=(), clipboard-write=(self), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), usb=(), xr-spatial-tracking=()
Referrer-policy strict-origin-when-cross-origin
Server Netlify
Strict-transport-security max-age=31536000; includeSubDomains
Vary Accept-Encoding
X-content-type-options nosniff
X-frame-options SAMEORIGIN
X-nf-request-id 01M0E16A2ABYDPRJN8RHMR5QFF
Content-length 52112
