Skip to main content
SGSiteGraph

expressjs.com

Express.js · Node.js web application framework

Last scanned Aug 2, 2026, 7:00 AM · 8 views

85

Overall score

Great

Summary

Fast, unopinionated, minimalist web framework for Node.js. This website uses Astro behind Cloudflare CDN. SEO is good (80/100) and accessibility is excellent (100/100). Security scores fair (65/100) and performance excellent (100/100). Top issue: No structured data (JSON-LD) found.

Fast, unopinionated, minimalist web framework for Node.js

Top issues to fix

8 issues found · 2 high priority

  • Missing Strict-Transport-Security header

    Security

    Add HSTS so browsers always use HTTPS — this closes the protocol-downgrade attack window.

  • Missing Content-Security-Policy header

    Security

    Add a CSP to control which sources can run scripts — the strongest single defense against XSS.

  • Missing X-Content-Type-Options header

    Security

    Add X-Content-Type-Options: nosniff to stop MIME-sniffing attacks.

  • Missing X-Frame-Options header

    Security

    Add X-Frame-Options (or a CSP frame-ancestors rule) to prevent clickjacking via hidden iframes.

  • No structured data (JSON-LD) found

    SEO

    Add JSON-LD (Organization, Article, Product…) to become eligible for rich results.

  • robots.txt not found

    SEO

    Publish /robots.txt with a Sitemap: directive to guide crawlers.

+2 more issues — details in the sections below.

80

SEO

3 issue(s) found

100

Performance

15 ms

65

Security

HTTPS & header checks

100

Accessibility

0 issue(s) found

Score history

-3 overall since Jul 26, 2026

Overall
85
SEO
80
Security
65
Performance
100
Accessibility
100

Organization

Company details published in this site's own structured data.

Fast, unopinionated, minimalist web framework for Node.js

Meta tags

Title
Express.js · Node.js web application framework
Description
Fast, unopinionated, minimalist web framework for Node.js
Canonical
https://expressjs.com/
Language
en
Charset
UTF-8
Viewport
width=device-width
Robots meta
max-image-preview:large, index, follow
Manifest
https://expressjs.com/site.webmanifest

OpenGraph & Twitter Card

OpenGraph

og:title
Express.js · Node.js web application framework
og:description
Fast, unopinionated, minimalist web framework for Node.js
og:type
website
og:url
https://expressjs.com/

Twitter Card

twitter:card
summary_large_image
twitter:title
Express.js · Node.js web application framework
twitter:description
Fast, unopinionated, minimalist web framework for Node.js

Technologies

Detected frameworks, languages, and tools.

Hosting & CDN

Hosting provider
CDN provider
Cloudflare
IP address
ASN

DNS records

TypeValue
A
AAAA
MX
TXT
NS
CAA
CNAME
IPv6 supportNo

TLS / SSL certificate

Version
TLS 1.3
Issuer
Google Trust Services
Subject
expressjs.com
Valid from
Jul 22, 2026
Valid to
Oct 20, 2026
Days until expiry
78
SAN domains
expressjs.com, *.expressjs.com

Security headers

  • Strict-Transport-SecurityMissing
  • Content-Security-PolicyMissing
  • X-Frame-OptionsMissing
  • X-Content-Type-OptionsMissing
  • Referrer-PolicyMissing
  • Permissions-PolicyMissing

Compression: gzip · 0 cookie(s) observed

Content & assets

Headings

H1 1 · H2 2 · H3 14

Links

65 internal · 18 external · 20 broken

Images

6 total · 0 missing alt

Scripts / Styles

13 scripts · 4 stylesheets

JS / CSS size

9.3 KB · 559 B

Page size

85.8 KB

Robots.txt & Sitemap

robots.txt
Not found
Disallow rules
0
sitemap.xml
Not found
URLs in sitemap
0

SEO issues

  • No structured data (JSON-LD) found
  • robots.txt not found
  • sitemap.xml not found

Accessibility issues

No accessibility issues detected.

Scan details

Requested URL
https://expressjs.com
Final URL
https://expressjs.com
HTTP status
200
HTTP version
HTTP/2
Response time
14 ms
HTML size
85.8 KB
Redirect chain
https://expressjs.com

See something wrong on this report? Request a correction

Frequently asked questions

What technology does expressjs.com use?
expressjs.com is built with Astro, Cloudflare Analytics.
Is expressjs.com secure (HTTPS)?
Yes. expressjs.com uses TLS 1.3 with a certificate issued by Google Trust Services, valid until Oct 20, 2026.
Who hosts expressjs.com?
Hosting provider information for expressjs.com is not available yet.
What is expressjs.com's SEO score?
expressjs.com scored 80/100 for SEO in the latest analysis (great).
What is expressjs.com's overall website score?
expressjs.com has an overall SiteGraph score of 85/100, combining SEO, performance, security, and accessibility.
Has expressjs.com's score changed over time?
expressjs.com's overall score has declined by 3 points (from 88 to 85) since Jul 26, 2026.