shapesecurity.com

Live preview

This site's Content-Security-Policy restricts embedding to specific origins ("frame-ancestors 'self' www.f5.com f5.com studio.f5.com cdn.studio.f5.com k6fem79d.api.sanity.io f5.com.cn www.f5.com.cn mktg.tags.f5.com mktg.collect.f5.com"), which does not include StatsMyWeb.

Since shapesecurity.com can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html; charset=utf-8

Cache-Control

public, max-age=0, must-revalidate

Content-Encoding

Not sent

Security

Content-Security-Policy

default-src www.youtube.com bid.g.doubleclick.net www.googletagmanager.com *.rfihub.com *.navattic.com hackerone.com f5-aira.netlify.app f5networks.demdex.net view.ceros.com capture.navattic.com consent.trustarc.com *.doubleclick.net *.adsrvr.org f5.my.salesforce-sites.com secureacceptance.cybersource.com *.f5.com 'self'; frame-ancestors 'self' www.f5.com f5.com studio.f5.com cdn.studio.f5.com k6fem79d.api.sanity.io f5.com.cn www.f5.com.cn mktg.tags.f5.com mktg.collect.f5.com; script-src mktg.tags.f5.com www.google-analytics.com www.googleadservices.com *.rfihub.net hm.baidu.com live.rezync.com my.tealiumiq.com www.trustradius.com cdn.bizible.com *.amplitude.com munchkin.marketo.net cdn.speedcurve.com j.6sc.co static.cloud.coveo.com tags.tiqcdn.com snap.licdn.com cdn.cookie.sync.usonar.jp js.clrt.ai www.googletagmanager.com scripts.demandbase.com img.ak.impact-ad.jp visitorapi.js at.js *.app.easyling.com app.easyling.com consent.trustarc.com view.ceros.com www.youtube.com api.company-target.com vault.pactsafe.io code.jquery.com cdn.jsdelivr.net js.adsrvr.org *.cdn.easyling.com googleads.g.doubleclick.net cookie.sync.usonar.jp penta.a.one.impact-ad.jp *.f5.com blob: 'self' 'unsafe-inline'; style-src https://www.trustradius.com https://*.trustradius.com https://*.cloudfront.net *.f5.com *.amplitude.com *.trustarc.com 'self' 'unsafe-inline'; img-src https://www.trustradius.com https://*.trustradius.com https://*.cloudfront.net www.google-analytics.com googleads.g.doubleclick.net *.rfihub.com cdn.studio.f5.com hm.baidu.com www.googleadservices.com sync.mathtag.com cdn.bizible.com *.trustarc.com dpm.demdex.net cdn.sanity.io r.turn.com *.google.com px.ads.linkedin.com b.6sc.co aw.dw.impact-ad.jp lux.speedcurve.com *.f5.com www.googletagmanager.com i.ytimg.com data: 'self'; connect-src *.amplitude.com stats.g.doubleclick.net www.googletagmanager.com googleads.g.doubleclick.net www.googleadservices.com mktg.collect.f5.com dpm.demdex.net my.tealiumiq.com www.trustradius.com f5networks.demdex.net *.omtrdc.net www.google-analytics.com px.ads.linkedin.com k6fem79d.api.sanity.io k6fem79d.apicdn.sanity.io www.google.com ad.doubleclick.net scripts.demandbase.com *.adsrvr.org consent.trustarc.com *.app.easyling.com app.easyling.com mboxedge35.tt.omtrdc.net *.cdn.easyling.com *.clrt.ai *.mktoresp.com ipv6.6sc.co epsilon.6sense.com *.id5-sync.com id5-sync.com beacon.speedcurve.com f5networkx1h1607h.org.coveo.com f5networkx1h1607h.analytics.org.coveo.com f5networksproduction5vkhn00h.analytics.org.coveo.com f5networksproduction5vkhn00h.org.coveo.com f5networksnonproduction1xqykzabw.analytics.org.coveo.com f5networksnonproduction1xqykzabw.org.coveo.com static.cloud.coveo.com pactsafe.io cdn.jsdelivr.net *.f5networks.net *.f5.com 'self'; object-src 'none'; base-uri 'self'; form-action 'self' *.f5.com secureacceptance.cybersource.com *.salesforce.com f5.my.salesforce-sites.com;

Strict-Transport-Security

max-age=31536000

X-Frame-Options

Not sent

X-Content-Type-Options

Not sent

Referrer-Policy

Not sent

Permissions-Policy

Permissions-Policy: geolocation=(), microphone=(), camera=(), gyroscope=(), magnetometer=(), payment=(), fullscreen=(self), autoplay=(self)

What each security header does

Redirect chain

1. 1.http://shapesecurity.com/HTTP 301

   → https://shapesecurity.com/

2. 2.https://shapesecurity.com/HTTP 301

   → https://www.f5.com/products/security/shape-security

3. 3.https://www.f5.com/products/security/shape-securityHTTP 308

   → https://www.f5.com/products/distributed-cloud-services/bot-defense

4. 4.https://www.f5.com/products/distributed-cloud-services/bot-defenseHTTP 200

Meta tags

Title

F5 Distributed Cloud Bot Defense | F5

Description

Protect your website, mobile apps, and APIs from malicious bots with F5 Distributed Cloud Bot Defense.

Canonical

Not set

Robots

index

Generator

Not set

Open Graph title

F5 Distributed Cloud Bot Defense

Open Graph description

Protect your website, mobile apps, and APIs from malicious bots with F5 Distributed Cloud Bot Defense.

Open Graph image

https://cdn.studio.f5.com/images/k6fem79d/translations-production/a18716e177eb23364b4562e5e19947c622d09234-1200x675.png

Open Graph type

website

Twitter card

summary_large_image

Twitter title

F5 Distributed Cloud Bot Defense

Twitter image

https://cdn.studio.f5.com/images/k6fem79d/translations-production/a18716e177eb23364b4562e5e19947c622d09234-1200x675.png

robots.txt

Disallow rules (User-agent: *)

0

Disallow rules (other agents)

0

No Sitemap declared in robots.txt.

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

• Next.jsframework

  Found "_next/static/" in the page's HTML

Related domains