Información Técnica
| Código de estado HTTP | 200 |
| Versión HTTP | HTTP/1.1 |
| HTTPS | ✔ Disponible |
| Dirección IP | 15.197.167.90 |
| Software del servidor | Netlify |
| Compresión | gzip |
|
ℹ 🔵 Falta Content Security Policy | No se ha configurado CSP. Ayuda a prevenir ataques XSS e inyección de contenido. |
Código de estado HTTP 200
Versión HTTP HTTP/1.1
HTTPS ✔ Disponible
Dirección IP 15.197.167.90
Software del servidor Netlify
Compresión gzip
ℹ 🔵 Falta Content Security Policy No se ha configurado CSP. Ayuda a prevenir ataques XSS e inyección de contenido.
Cadena de Redirecciones
| # | URL | Código de estado HTTP | Estado |
| 1 | https://heap.io:443 | 301 | HTTP/2 301 |
| 2 | https://www.heap.io/ | 200 | HTTP/2 200 |
#1 URL https://heap.io:443
Código de estado HTTP 301
Estado HTTP/2 301
#2 URL https://www.heap.io/
Código de estado HTTP 200
Estado HTTP/2 200
Rendimiento
| Resolución DNS | 38.1 ms |
| Conexión TCP | 47.3 ms |
| Negociación TLS | 13.1 ms |
| Tiempo hasta el primer byte (TTFB) | 72.4 ms |
| Descarga de contenido | 18.5 ms |
| Tiempo total de respuesta | 90.9 ms |
Resolución DNS 38.1 ms
Conexión TCP 47.3 ms
Negociación TLS 13.1 ms
Tiempo hasta el primer byte (TTFB) 72.4 ms
Descarga de contenido 18.5 ms
Tiempo total de respuesta 90.9 ms
Seguridad
| HTTPS | ✔ Activado |
| HSTS | ✔ max-age=31536000; includeSubDomains |
| CSP | ⚠ No configurado |
| X-Frame-Options | ✔ SAMEORIGIN |
| X-Content-Type-Options | ✔ nosniff |
| Política de Referrer | strict-origin-when-cross-origin |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Activado
HSTS ✔ max-age=31536000; includeSubDomains
CSP ⚠ No configurado
X-Frame-Options ✔ SAMEORIGIN
X-Content-Type-Options ✔ nosniff
Política de Referrer strict-origin-when-cross-origin
HTTP/2 ⚠ HTTP/1.1
Comprobación SEO
| Título | Heap - Better Insights. Faster. | Heap |
| Meta descripción | Heap by Contentsquare is the only digital insights platform that shows everything users do on your site, revealing the "unknown unknowns" that stay invisible with other tools. |
| Canonical | https://www.heap.io/ |
| Título Open Graph | Heap - Better Insights. Faster. |
| Descripción Open Graph | Heap by Contentsquare is the only digital insights platform that shows everything users do on your site, revealing the "unknown unknowns" that stay invisible with other tools. |
| Imagen Open Graph | https://images.ctfassets.net/jicu8fwm4fvs/57SlD3uXZskS7cH... |
| Twitter Card | summary_large_image |
Título Heap - Better Insights. Faster. | Heap Meta descripción Heap by Contentsquare is the only digital insights platform that shows everything users do on your site, revealing the "unknown unknowns" that stay invisible with other tools. Canonical https://www.heap.io/ Título Open Graph Heap - Better Insights. Faster. Descripción Open Graph Heap by Contentsquare is the only digital insights platform that shows everything users do on your site, revealing the "unknown unknowns" that stay invisible with other tools. Imagen Open Graph https://images.ctfassets.net/jicu8fwm4fvs/57SlD3uXZskS7cH... Twitter Card summary_large_image Tecnologías Detectadas
| Tecnología | React Google Analytics Google Tag Manager Next.js Hotjar |
Tecnología React Google Analytics Google Tag Manager Next.js Hotjar
Cabeceras HTTP
| Accept-ranges
| bytes |
| Access-control-allow-origin
| * |
| Age
| 26456 |
| Cache-control
| public,max-age=0,must-revalidate |
| Cache-status
| "Netlify Edge"; hit; ttl=31509545 |
| Content-encoding
| gzip |
| Content-security-policy-report-only
| default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.cookielaw.org https://optly.heap.io https://www.googleoptimize.com https://www.googletagmanager.com https://cdn.us.heap-api.com https://marketo.clearbit.com https://*.wistia.net https://js.chilipiper.com https://js.driftt.com https://*.clearbit.com https://app-ab33.marketo.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.cookielaw.org https://*.ctfassets.net; img-src 'self' data: https://*.ctfassets.net https://www.google-analytics.com https://www.googletagmanager.com https://*.wistia.net https://heapanalytics.com https://*.clearbit.com https://*.doubleclick.net; connect-src 'self' https://*.contentful.com https://*.heap-api.com https://heapanalytics.com https://www.google-analytics.com https://*.wistia.net https://*.doubleclick.net https://*.cookielaw.org https://app-ab33.marketo.com; font-src 'self' data: https://fonts.gstatic.com; frame-src 'self' https://*.wistia.net https://*.marketo.com https://*.chilipiper.com; worker-src 'self' blob:; manifest-src 'self'; base-uri 'self'; form-action 'self' https://*.marketo.com; frame-ancestors 'self'; media-src 'self' https://*.wistia.net blob:; object-src 'none' |
| Content-type
| text/html; charset=UTF-8 |
| Date
| Thu, 20 Aug 2026 02:06:04 GMT |
| Etag
| "70e0dfd0e2932e051fd5af8e2dd6549a-ssl-df" |
| Netlify-vary
| cookie=__next_preview_data:presence|__prerender_bypass:presence |
| Permission-policy
| accelerometer=(), autoplay=(*), camera=(), clipboard-write=(self), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), usb=(), xr-spatial-tracking=() |
| Referrer-policy
| strict-origin-when-cross-origin |
| Server
| Netlify |
| Strict-transport-security
| max-age=31536000; includeSubDomains |
| Vary
| Accept-Encoding |
| X-content-type-options
| nosniff |
| X-frame-options
| SAMEORIGIN |
| X-nf-request-id
| 01M0EEP6C1F74SGMW7474K1J9N |
| Content-length
| 52112 |
Meta Tags
| Viewport | width=device-width, initial-scale=1 |
| Description | Heap by Contentsquare is the only digital insights platform that shows everything users do on your site, revealing the "unknown unknowns" that stay invisible with other tools. |
| Split-test-data | nav-demo-test-control |
| Next-head-count | 26 |
Accept-ranges bytes
Access-control-allow-origin *
Age 26456
Cache-control public,max-age=0,must-revalidate
Cache-status "Netlify Edge"; hit; ttl=31509545
Content-encoding gzip
Content-security-policy-report-only default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.cookielaw.org https://optly.heap.io https://www.googleoptimize.com https://www.googletagmanager.com https://cdn.us.heap-api.com https://marketo.clearbit.com https://*.wistia.net https://js.chilipiper.com https://js.driftt.com https://*.clearbit.com https://app-ab33.marketo.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.cookielaw.org https://*.ctfassets.net; img-src 'self' data: https://*.ctfassets.net https://www.google-analytics.com https://www.googletagmanager.com https://*.wistia.net https://heapanalytics.com https://*.clearbit.com https://*.doubleclick.net; connect-src 'self' https://*.contentful.com https://*.heap-api.com https://heapanalytics.com https://www.google-analytics.com https://*.wistia.net https://*.doubleclick.net https://*.cookielaw.org https://app-ab33.marketo.com; font-src 'self' data: https://fonts.gstatic.com; frame-src 'self' https://*.wistia.net https://*.marketo.com https://*.chilipiper.com; worker-src 'self' blob:; manifest-src 'self'; base-uri 'self'; form-action 'self' https://*.marketo.com; frame-ancestors 'self'; media-src 'self' https://*.wistia.net blob:; object-src 'none'
Content-type text/html; charset=UTF-8
Date Thu, 20 Aug 2026 02:06:04 GMT
Etag "70e0dfd0e2932e051fd5af8e2dd6549a-ssl-df"
Netlify-vary cookie=__next_preview_data:presence|__prerender_bypass:presence
Permission-policy accelerometer=(), autoplay=(*), camera=(), clipboard-write=(self), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), usb=(), xr-spatial-tracking=()
Referrer-policy strict-origin-when-cross-origin
Server Netlify
Strict-transport-security max-age=31536000; includeSubDomains
Vary Accept-Encoding
X-content-type-options nosniff
X-frame-options SAMEORIGIN
X-nf-request-id 01M0EEP6C1F74SGMW7474K1J9N
Content-length 52112
