roasted.cv

Live preview

This site sends "X-Frame-Options: DENY", which blocks embedding it here.

Since roasted.cv can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html; charset=utf-8

Cache-Control

private, no-cache, no-store, max-age=0, must-revalidate

Content-Encoding

Not sent

Security

Content-Security-Policy

default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: https://www.googletagmanager.com https://*.clarity.ms https://lmsqueezy.com https://assets.lemonsqueezy.com https://app.lemonsqueezy.com https://*.lemonsqueezy.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: https://www.googletagmanager.com https://*.clarity.ms https://lmsqueezy.com https://assets.lemonsqueezy.com https://app.lemonsqueezy.com https://*.lemonsqueezy.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' https://*.supabase.co wss://*.supabase.co https://eu.i.posthog.com https://eu-assets.i.posthog.com https://www.googletagmanager.com https://*.google-analytics.com https://*.clarity.ms https://api.resend.com https://raw.githubusercontent.com https://packages.typst.org https://app.lemonsqueezy.com https://*.lemonsqueezy.com; media-src 'self' blob: https://*.supabase.co; worker-src 'self' blob:; frame-src 'self' https://app.lemonsqueezy.com https://*.lemonsqueezy.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self'

Strict-Transport-Security

max-age=63072000; includeSubDomains; preload

X-Frame-Options

DENY

X-Content-Type-Options

nosniff

Referrer-Policy

strict-origin-when-cross-origin

Permissions-Policy

Not sent

What each security header does

Redirect chain

1. 1.http://roasted.cv/HTTP 308

   → https://roasted.cv/

2. 2.https://roasted.cv/HTTP 200

Meta tags

Title

Roasted.cv | Get your CV roasted. Get hired.

Description

AI-powered resume review with brutally honest feedback.

Canonical

https://roasted.cv

Robots

index, follow

Generator

Not set

Open Graph title

Roasted.cv | Get your CV roasted. Get hired.

Open Graph description

AI-powered resume review with brutally honest feedback.

Open Graph image

https://roasted.cv/en/opengraph-image?e32c08a8c61d54de

Open Graph type

website

Twitter card

summary_large_image

Twitter title

Roasted.cv | Get your CV roasted. Get hired.

Twitter image

https://roasted.cv/en/twitter-image?835b67a72a431711

robots.txt

Disallow rules (User-agent: *)

2

Disallow rules (other agents)

28

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

• Next.jsframework

  Found "_next/static/" in the page's HTML

• Google Analyticsanalytics

  Found "googletagmanager.com/gtag/js" in the page's HTML

Related domains