Content-Security-Policy

snyk.io sends an enforcing CSP. It is allowlist-based.

default-src 'self';base-uri 'none';child-src https://*.qualified.com;script-src 'self' 'wasm-unsafe-eval' https://*.qualified.com;script-src-elem 'self' 'unsafe-inline' blob: https://snyk.io https://*.snyk.io http://*.snyk.io https://*.dev.snyk.io https://*.usercentrics.eu cdn.segment.com bat.bing.com https://*.6sense.com https://*.6sc.co https://linkedin.com https://*.linkedin.com www.google.com www.google-analytics.com *.googletagmanager.com www.googleadservices.com googleads.g.doubleclick.net https://*.doubleclick.net/ ssl.google-analytics.com https://www.gstatic.com https://assets.trendemon.com https://trackingapi.trendemon.com 479-bcc-915.mktoweb.com munchkin.marketo.net https://platform.twitter.com fast.wistia.com www.gartner.com https://cdnjs.cloudflare.com https://connect.facebook.net https://*.salesloft.com https://snap.licdn.com https://*.vercel-scripts.com https://vercel.live https://js.zi-scripts.com https://tracking.intentsify.io https://view.ceros.com/ https://www.redditstatic.com https://ads.reddit.com https://cdn.dreamdata.cloud https://widgets.peerspot.com https://static.ads-twitter.com https://js.storylane.io https://a.usbrowserspeed.com https://tags.srv.stackadapt.com https://qvdt3feo.com https://js.qualified.com https://*.qualified.com https://js.adsrvr.org https://cdn.jsdelivr.net https://bzrcdn.openai.com https://s.yimg.com;connect-src 'self' https://*.snyk.io https://*.dev.snyk.io https://*.usercentrics.eu https://677-thp-415.mktoresp.com *.segment.com *.segment.io https://res.cloudinary.com https://bat.bing.com https://*.googleadservices.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net https://ad.doubleclick.net *.google.com fast.wistia.com https://embed-cloudfront.wistia.com https://distillery.wistia.com https://boards-api.greenhouse.io https://secure.adnxs.com https://cdn.linkedin.oribi.io https://*.6sense.com https://*.6sc.co https://linkedin.com https://*.linkedin.com https://*.salesloft.com https://storage.googleapis.com https://*.googlesyndication.com https://js.zi-scripts.com https://*.zoominfo.com https://vercel.live wss://ws-us3.pusher.com https://677-thp-415.mktoutil.com https://pixel-config.reddit.com https://www.redditstatic.com https://conversions-config.reddit.com https://ads.reddit.com https://cdn.dreamdata.cloud https://cdn.jsdelivr.net https://unpkg.com/@rive-app/ https://registration.qa.probely.dev https://registration.probely.com https://api.openai.com https://generativelanguage.googleapis.com https://tags.srv.stackadapt.com https://qvdt3feo.com https://app.qualified.com https://*.qualified.com wss://ws8.qualified.com wss://*.qualified.com https://insight.adsrvr.org https://bzr.openai.com https://bzrcdn.openai.com;style-src 'self' 'unsafe-inline' 479-bcc-915.mktoweb.com *.snyk.io www.gartner.com cdn.segment.io fonts.googleapis.com https://vercel.live https://tags.srv.stackadapt.com https://*.qualified.com;img-src 'self' data: blob: https://res.cloudinary.com https://*.usercentrics.eu https://bat.bing.com https://*.6sense.com https://*.6sc.co https://linkedin.com https://*.linkedin.com www.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net *.google.com *.google.at *.google.be *.google.ca *.google.ch *.google.co.id *.google.co.il *.google.co.in *.google.co.jp *.google.co.nz *.google.co.uk *.google.com.au *.google.com.br *.google.com.mx *.google.com.sg *.google.de *.google.dk *.google.fi *.google.fr *.google.ie *.google.nl *.google.no *.google.pt *.google.ro *.google.se www.googletagmanager.com https://*.trendemon.com https://img.youtube.com https://i.ytimg.com fast.wistia.com *.salesloft.com https://syndication.twitter.com https://embed-ssl.wistia.com www.gartner.com https://reviews.static.gartner.com https://www.linkedin.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://vercel.live https://vercel.com https://alb.reddit.com https://cnv.event.prod.bidr.io/log/cnv https://www.redditstatic.com https://widgets.peerspot.com https://images.peerspot.com https://www.peerspot.com https://analytics.twitter.com https://t.co https://*.qualified.com https://bzr.openai.com;frame-src *.ceros.com/ 'self' *.snyk.io https://res.cloudinary.com 479-bcc-915.mktoweb.com https://web.cmp.usercentrics.eu bid.g.doubleclick.net *.doubleclick.net www.google.com www.youtube.com https://*.6sense.com https://*.6sc.co https://linkedin.com https://*.linkedin.com https://i.ytimg.com https://platform.twitter.com www.gartner.com https://www.googletagmanager.com https://player.simplecast.com https://app.usercentrics.eu https://vercel.live play.vidyard.com/ https://*.vimeo.com https://app.qualified.com https://*.qualified.com https://insight.adsrvr.org;form-action 'self' https://snyk.us21.list-manage.com;frame-ancestors 'self' https://resources.snyk.io https://app.contentful.com https://www.linkedin.com;font-src 'self' data: https://res.cloudinary.com/snyk/ fast.wistia.com www.gartner.com *.gstatic.com https://vercel.live https://assets.vercel.com https://www.redditstatic.com;media-src 'self' blob: mediastream: https://assets.ctfassets.net https://downloads.ctfassets.net https://res.cloudinary.com https://*.qualified.com;worker-src 'self' blob:;manifest-src 'self';object-src https://res.cloudinary.com;

Directive	Sources
default-src	'self'
base-uri	'none'
child-src	https://*.qualified.com
script-src	'self' 'wasm-unsafe-eval' https://*.qualified.com
script-src-elem	'self' 'unsafe-inline' blob: https://snyk.io https://*.snyk.io http://*.snyk.io https://*.dev.snyk.io https://*.usercentrics.eu cdn.segment.com bat.bing.com https://*.6sense.com https://*.6sc.co https://linkedin.com https://*.linkedin.com www.google.com www.google-analytics.com *.googletagmanager.com www.googleadservices.com googleads.g.doubleclick.net https://*.doubleclick.net/ ssl.google-analytics.com https://www.gstatic.com https://assets.trendemon.com https://trackingapi.trendemon.com 479-bcc-915.mktoweb.com munchkin.marketo.net https://platform.twitter.com fast.wistia.com www.gartner.com https://cdnjs.cloudflare.com https://connect.facebook.net https://*.salesloft.com https://snap.licdn.com https://*.vercel-scripts.com https://vercel.live https://js.zi-scripts.com https://tracking.intentsify.io https://view.ceros.com/ https://www.redditstatic.com https://ads.reddit.com https://cdn.dreamdata.cloud https://widgets.peerspot.com https://static.ads-twitter.com https://js.storylane.io https://a.usbrowserspeed.com https://tags.srv.stackadapt.com https://qvdt3feo.com https://js.qualified.com https://*.qualified.com https://js.adsrvr.org https://cdn.jsdelivr.net https://bzrcdn.openai.com https://s.yimg.com
connect-src	'self' https://*.snyk.io https://*.dev.snyk.io https://*.usercentrics.eu https://677-thp-415.mktoresp.com *.segment.com *.segment.io https://res.cloudinary.com https://bat.bing.com https://*.googleadservices.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net https://ad.doubleclick.net *.google.com fast.wistia.com https://embed-cloudfront.wistia.com https://distillery.wistia.com https://boards-api.greenhouse.io https://secure.adnxs.com https://cdn.linkedin.oribi.io https://*.6sense.com https://*.6sc.co https://linkedin.com https://*.linkedin.com https://*.salesloft.com https://storage.googleapis.com https://*.googlesyndication.com https://js.zi-scripts.com https://*.zoominfo.com https://vercel.live wss://ws-us3.pusher.com https://677-thp-415.mktoutil.com https://pixel-config.reddit.com https://www.redditstatic.com https://conversions-config.reddit.com https://ads.reddit.com https://cdn.dreamdata.cloud https://cdn.jsdelivr.net https://unpkg.com/@rive-app/ https://registration.qa.probely.dev https://registration.probely.com https://api.openai.com https://generativelanguage.googleapis.com https://tags.srv.stackadapt.com https://qvdt3feo.com https://app.qualified.com https://*.qualified.com wss://ws8.qualified.com wss://*.qualified.com https://insight.adsrvr.org https://bzr.openai.com https://bzrcdn.openai.com
style-src	'self' 'unsafe-inline' 479-bcc-915.mktoweb.com *.snyk.io www.gartner.com cdn.segment.io fonts.googleapis.com https://vercel.live https://tags.srv.stackadapt.com https://*.qualified.com
img-src	'self' data: blob: https://res.cloudinary.com https://*.usercentrics.eu https://bat.bing.com https://*.6sense.com https://*.6sc.co https://linkedin.com https://*.linkedin.com www.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net *.google.com *.google.at *.google.be *.google.ca *.google.ch *.google.co.id *.google.co.il *.google.co.in *.google.co.jp *.google.co.nz *.google.co.uk *.google.com.au *.google.com.br *.google.com.mx *.google.com.sg *.google.de *.google.dk *.google.fi *.google.fr *.google.ie *.google.nl *.google.no *.google.pt *.google.ro *.google.se www.googletagmanager.com https://*.trendemon.com https://img.youtube.com https://i.ytimg.com fast.wistia.com *.salesloft.com https://syndication.twitter.com https://embed-ssl.wistia.com www.gartner.com https://reviews.static.gartner.com https://www.linkedin.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://vercel.live https://vercel.com https://alb.reddit.com https://cnv.event.prod.bidr.io/log/cnv https://www.redditstatic.com https://widgets.peerspot.com https://images.peerspot.com https://www.peerspot.com https://analytics.twitter.com https://t.co https://*.qualified.com https://bzr.openai.com
frame-src	*.ceros.com/ 'self' *.snyk.io https://res.cloudinary.com 479-bcc-915.mktoweb.com https://web.cmp.usercentrics.eu bid.g.doubleclick.net *.doubleclick.net www.google.com www.youtube.com https://*.6sense.com https://*.6sc.co https://linkedin.com https://*.linkedin.com https://i.ytimg.com https://platform.twitter.com www.gartner.com https://www.googletagmanager.com https://player.simplecast.com https://app.usercentrics.eu https://vercel.live play.vidyard.com/ https://*.vimeo.com https://app.qualified.com https://*.qualified.com https://insight.adsrvr.org
form-action	'self' https://snyk.us21.list-manage.com
frame-ancestors	'self' https://resources.snyk.io https://app.contentful.com https://www.linkedin.com
font-src	'self' data: https://res.cloudinary.com/snyk/ fast.wistia.com www.gartner.com *.gstatic.com https://vercel.live https://assets.vercel.com https://www.redditstatic.com
media-src	'self' blob: mediastream: https://assets.ctfassets.net https://downloads.ctfassets.net https://res.cloudinary.com https://*.qualified.com
worker-src	'self' blob:
manifest-src	'self'
object-src	https://res.cloudinary.com

Headers sent

Header	Value
strict-transport-security	max-age=31536000; preload
x-content-type-options	nosniff
referrer-policy	no-referrer
permissions-policy	accelerometer=(), camera=(), microphone=(), usb=()
x-xss-protection	1; mode=block
server	Vercel
x-powered-by	Next.js

Re-scan live

This is a snapshot from 2026-08-04. Check it now:

Scan