openhands.dev

Live preview

This site's Content-Security-Policy restricts embedding to specific origins ("frame-ancestors 'self'"), which does not include StatsMyWeb.

Since openhands.dev can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html

Cache-Control

public, max-age=0, must-revalidate

Content-Encoding

Not sent

Security

Content-Security-Policy

default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://static.reo.dev https://assets.apollo.io https://d-code.liadm.com https://js.hs-scripts.com https://*.hs-scripts.com https://js.hs-analytics.net https://*.hs-analytics.net https://js.hs-banner.com https://*.hs-banner.com https://js.hscollectedforms.net https://*.hscollectedforms.net https://js.hsforms.net https://*.hsforms.net https://*.hsforms.com https://*.hubspot.com https://js.usemessages.com https://*.usemessages.com https://static.hsappstatic.net https://*.hsappstatic.net https://va.vercel-scripts.com https://snap.licdn.com https://z.openhands.dev; connect-src 'self' https://api.reo.dev https://m1.openfpcdn.io https://aplo-evnt.com https://*.liadm.com https://z.openhands.dev https://us.posthog.com https://us.i.posthog.com https://us-assets.i.posthog.com https://*.hs-analytics.net https://*.hs-banner.com https://*.hscollectedforms.net https://*.hubspot.com https://*.hubapi.com https://*.hsforms.com https://*.hsforms.net https://track.hubspot.com https://show-od-trajectory-3u9bw9tx.uc.gateway.dev https://px.ads.linkedin.com; img-src 'self' data: blob: https://avatars.githubusercontent.com https://*.hubspot.com https://*.hsforms.net https://*.hsforms.com https://cdn2.hubspot.net https://no-cache.hubspot.com https://track.hubspot.com https://*.fs1.hubspotusercontent-na1.net https://i.ytimg.com https://*.ytimg.com https://*.hsappstatic.net https://px.ads.linkedin.com; style-src 'self' 'unsafe-inline' https://cdn2.hubspot.net https://*.hsappstatic.net; font-src 'self' data: https://*.hsappstatic.net; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://*.hsforms.net https://*.hsforms.com https://*.hubspot.com; worker-src 'self' blob:; media-src 'self' data: blob:; form-action 'self' https://*.hubspot.com https://*.hsforms.com https://*.hubapi.com;

Strict-Transport-Security

max-age=63072000

X-Frame-Options

Not sent

X-Content-Type-Options

Not sent

Referrer-Policy

Not sent

Permissions-Policy

Not sent

What each security header does

Redirect chain

1. 1.http://openhands.dev/HTTP 308

   → https://openhands.dev/

2. 2.https://openhands.dev/HTTP 308

   → https://www.openhands.dev/

3. 3.https://www.openhands.dev/HTTP 200

Meta tags

Title

OpenHands | Open Source AI Coding Agent Platform

Description

Build and run AI coding agents with OpenHands. Start locally, automate engineering workflows, use any model, and scale with enterprise controls.

Canonical

https://www.openhands.dev

Robots

Not set

Generator

Not set

Open Graph title

OpenHands | Open Source AI Coding Agent Platform

Open Graph description

Build and run AI coding agents with OpenHands. Start locally, automate engineering workflows, use any model, and scale with enterprise controls.

Open Graph image

https://www.openhands.dev/assets/webflow/og/69161b32abf448a2df921a73_openhands_opengraph_01.png

Open Graph type

website

Twitter card

summary_large_image

Twitter title

OpenHands | Open Source AI Coding Agent Platform

Twitter image

https://www.openhands.dev/assets/webflow/og/69161b32abf448a2df921a73_openhands_opengraph_01.png

robots.txt

Disallow rules (User-agent: *)

0

Disallow rules (other agents)

0

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

Related domains