Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 52.31.103.110 |
| Compression | gzip |
|
🔒 🟡 Mixed Content (1 HTTP resources) | The page is served over HTTPS but loads 1 resource(s) over HTTP. This may be blocked in modern browsers. |
|
ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 52.31.103.110
Compression gzip
🔒 🟡 Mixed Content (1 HTTP resources) The page is served over HTTPS but loads 1 resource(s) over HTTP. This may be blocked in modern browsers.
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
Redirect Chain
| # | URL | HTTP Status Code | Status |
| 1 | https://npl.co.uk:443 | 301 | HTTP/2 301 |
| 2 | https://www.npl.co.uk/ | 200 | HTTP/2 200 |
#1 URL https://npl.co.uk:443
HTTP Status Code 301
Status HTTP/2 301
#2 URL https://www.npl.co.uk/
HTTP Status Code 200
Status HTTP/2 200
Performance
| DNS Lookup | 103.5 ms |
| TCP Connect | 118.8 ms |
| TLS Handshake | 18.4 ms |
| Time To First Byte (TTFB) | 272.4 ms |
| Content Download | 14.4 ms |
| Total Response Time | 286.8 ms |
DNS Lookup 103.5 ms
TCP Connect 118.8 ms
TLS Handshake 18.4 ms
Time To First Byte (TTFB) 272.4 ms
Content Download 14.4 ms
Total Response Time 286.8 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=31536000; preload |
| CSP | ✔ Configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ✔ nosniff |
| Referrer Policy | strict-origin-when-cross-origin |
| Permissions Policy | ✔ Configured |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=31536000; preload
CSP ✔ Configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ✔ nosniff
Referrer Policy strict-origin-when-cross-origin
Permissions Policy ✔ Configured
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
| Title | National Physical Laboratory - impact from science - NPL |
| Canonical | https://www.npl.co.uk/ |
| Open Graph Title | National Physical Laboratory - impact from science - NPL |
| Open Graph Description | National Physical Laboratory (NPL) is the UK’s National Metrology Institute, providing the measurement capability that underpins the UK’s prosperity and quality of life. |
| Open Graph Image | https://www.npl.co.uk/getmedia/08f4ff46-09c6-4590-8376-22... |
| Twitter Card | summary |
| Twitter Title | National Physical Laboratory - impact from science - NPL |
| Twitter Description | National Physical Laboratory (NPL) is the UK’s National Metrology Institute, providing the measurement capability that underpins the UK’s prosperity and quality of life. |
| Twitter Image | https://www.npl.co.uk/getmedia/08f4ff46-09c6-4590-8376-22... |
Title National Physical Laboratory - impact from science - NPL Canonical https://www.npl.co.uk/ Open Graph Title National Physical Laboratory - impact from science - NPL Open Graph Description National Physical Laboratory (NPL) is the UK’s National Metrology Institute, providing the measurement capability that underpins the UK’s prosperity and quality of life. Open Graph Image https://www.npl.co.uk/getmedia/08f4ff46-09c6-4590-8376-22... Twitter Card summary Twitter Title National Physical Laboratory - impact from science - NPL Twitter Description National Physical Laboratory (NPL) is the UK’s National Metrology Institute, providing the measurement capability that underpins the UK’s prosperity and quality of life. Twitter Image https://www.npl.co.uk/getmedia/08f4ff46-09c6-4590-8376-22... Detected Technologies
| Technology | jQuery Google Analytics Google Tag Manager Hotjar |
Technology jQuery Google Analytics Google Tag Manager Hotjar
HTTP Headers
| Content-type
| text/html; charset=utf-8 |
| Vary
| Accept-Encoding |
| Strict-transport-security
| max-age=31536000; preload |
| Referrer-policy
| strict-origin-when-cross-origin |
| Access-control-allow-origin
| https://www.npl.co.uk |
| X-content-type-options
| nosniff |
| X-permitted-cross-domain-policies
| none |
| X-xss-protection
| 1; mode=block |
| Expect-ct
| max-age=0, enforce |
| Permissions-policy
| accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), clipboard-read=("https://*.npl.co.uk" "https://*.hosted.positive.co.uk" "https://*.local" "https://*.npl.local") |
| Content-security-policy
| default-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' *.pingdom.net *.npl.co.uk *.onetrust.com *.linkedin.com googleads.g.doubleclick.net cdn.jsdelivr.net npl-digital.gitlab-docs.npl.co.uk *.reciteme.com *.fonts.net assets.calendly.com https://*.hotjar.com www.buzzsprout.com www.gstatic.com www.googletagmanager.com www.google-analytics.com *.google.com maps.googleapis.com ajax.googleapis.com code.jquery.com unpkg.com cc.cdn.civiccomputing.com player.vimeo.com script.crazyegg.com;manifest-src 'self';style-src 'self' 'unsafe-inline' https://*.hotjar.com *.reciteme.com *.fonts.net assets.calendly.com fonts.googleapis.com unpkg.com *.typekit.net;connect-src 'self' https://cdn.jsdelivr.net https://npl-capp-ntpsvr01-dev.wittycoast-2cbd4e09.uksouth.azurecontainerapps.io https://npl-capp-ntpsvr02-dev.wittycoast-2cbd4e09.uksouth.azurecontainerapps.io *.pingdom.net *.google-analytics.com vc.hotjar.io *.onetrust.com google.com npl-app-ntpsvr-prod.azurewebsites.net ws.hotjar.com metrics.hotjar.io content.hotjar.io surveystats.hotjar.io *.reciteme.com www.google-analytics.com maps.googleapis.com *.google.com *.doubleclick.net wss://ws.hotjar.com;font-src 'self' data: *.fonts.net https://*.hotjar.com *.reciteme.com fonts.gstatic.com *.typekit.net;frame-ancestors 'self' admin.npl.local *.cubeddigital.com *.hosted.positive.co.uk uat-cms.npl.co.uk cms.npl.co.uk;frame-src 'self' *.typeform.com go.www.npl.co.uk *.linkedin.com www.googletagmanager.com go.pardot.com www.amrislive.com td.doubleclick.net *.cubeddigital.com *.hosted.positive.co.uk *.youtube-nocookie.com *.youtube.com *.google.com player.vimeo.com cdn.yoshki.com www.buzzsprout.com;img-src 'self' google.co.in cdn-ukwest.onetrust.com www.google.co.uk *.reciteme.com *.google-analytics.com *.googletagmanager.com *.google.com https://*.hotjar.com api.mapbox.com maps.gstatic.com maps.googleapis.com *.vimeocdn.com data:;worker-src 'self' blob: *.cubeddigital.com *.hosted.positive.co.uk *.npl.co.uk;media-src 'self' *.reciteme.com;form-action 'self'; |
| Date
| Fri, 24 Jul 2026 15:10:56 GMT |
| Sversion
| PALSS 10.1.1.110222 |
| Scluster
| hd1-lon.hybridcloudspan.com |
| X-ssl-protocol
| TLSv1.3 |
| Cache-control
| no-store, no-cache, must-revalidate |
| Content-encoding
| gzip |
Meta Tags
| Viewport | width=device-width, initial-scale=1, user-scalable=no |
Content-type text/html; charset=utf-8
Vary Accept-Encoding
Strict-transport-security max-age=31536000; preload
Referrer-policy strict-origin-when-cross-origin
Access-control-allow-origin https://www.npl.co.uk
X-content-type-options nosniff
X-permitted-cross-domain-policies none
X-xss-protection 1; mode=block
Expect-ct max-age=0, enforce
Permissions-policy accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), clipboard-read=("https://*.npl.co.uk" "https://*.hosted.positive.co.uk" "https://*.local" "https://*.npl.local")
Content-security-policy default-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' *.pingdom.net *.npl.co.uk *.onetrust.com *.linkedin.com googleads.g.doubleclick.net cdn.jsdelivr.net npl-digital.gitlab-docs.npl.co.uk *.reciteme.com *.fonts.net assets.calendly.com https://*.hotjar.com www.buzzsprout.com www.gstatic.com www.googletagmanager.com www.google-analytics.com *.google.com maps.googleapis.com ajax.googleapis.com code.jquery.com unpkg.com cc.cdn.civiccomputing.com player.vimeo.com script.crazyegg.com;manifest-src 'self';style-src 'self' 'unsafe-inline' https://*.hotjar.com *.reciteme.com *.fonts.net assets.calendly.com fonts.googleapis.com unpkg.com *.typekit.net;connect-src 'self' https://cdn.jsdelivr.net https://npl-capp-ntpsvr01-dev.wittycoast-2cbd4e09.uksouth.azurecontainerapps.io https://npl-capp-ntpsvr02-dev.wittycoast-2cbd4e09.uksouth.azurecontainerapps.io *.pingdom.net *.google-analytics.com vc.hotjar.io *.onetrust.com google.com npl-app-ntpsvr-prod.azurewebsites.net ws.hotjar.com metrics.hotjar.io content.hotjar.io surveystats.hotjar.io *.reciteme.com www.google-analytics.com maps.googleapis.com *.google.com *.doubleclick.net wss://ws.hotjar.com;font-src 'self' data: *.fonts.net https://*.hotjar.com *.reciteme.com fonts.gstatic.com *.typekit.net;frame-ancestors 'self' admin.npl.local *.cubeddigital.com *.hosted.positive.co.uk uat-cms.npl.co.uk cms.npl.co.uk;frame-src 'self' *.typeform.com go.www.npl.co.uk *.linkedin.com www.googletagmanager.com go.pardot.com www.amrislive.com td.doubleclick.net *.cubeddigital.com *.hosted.positive.co.uk *.youtube-nocookie.com *.youtube.com *.google.com player.vimeo.com cdn.yoshki.com www.buzzsprout.com;img-src 'self' google.co.in cdn-ukwest.onetrust.com www.google.co.uk *.reciteme.com *.google-analytics.com *.googletagmanager.com *.google.com https://*.hotjar.com api.mapbox.com maps.gstatic.com maps.googleapis.com *.vimeocdn.com data:;worker-src 'self' blob: *.cubeddigital.com *.hosted.positive.co.uk *.npl.co.uk;media-src 'self' *.reciteme.com;form-action 'self';
Date Fri, 24 Jul 2026 15:10:56 GMT
Sversion PALSS 10.1.1.110222
Scluster hd1-lon.hybridcloudspan.com
X-ssl-protocol TLSv1.3
Cache-control no-store, no-cache, must-revalidate
Content-encoding gzip
