strava.com
Strava | Running, Cycling & Hiking App - Train, Track & Share
Last scanned Jul 18, 2026, 8:49 PM
Overall score
Fair
Top issues to fix
6 issues found · 2 high priority
Missing Strict-Transport-Security header
SecurityAdd HSTS so browsers always use HTTPS — this closes the protocol-downgrade attack window.
Missing Content-Security-Policy header
SecurityAdd a CSP to control which sources can run scripts — the strongest single defense against XSS.
Missing X-Content-Type-Options header
SecurityAdd X-Content-Type-Options: nosniff to stop MIME-sniffing attacks.
Missing X-Frame-Options header
SecurityAdd X-Frame-Options (or a CSP frame-ancestors rule) to prevent clickjacking via hidden iframes.
Title longer than 60 characters
SEOShorten the title to under 60 characters so search results don't truncate it.
Multiple H1 headings found
SEOKeep a single H1 per page and demote the others to H2/H3.
Summary
Strava connects millions of runners, cyclists, hikers, walkers and other active people through the sports they love – all on our mobile app and website. This website uses Next.js hosted on AWS behind CloudFront CDN. SEO is excellent (90/100) and accessibility is excellent (100/100). Security scores fair (65/100) and performance poor (40/100). Top issue: Title longer than 60 characters.
SEO
2 issue(s) found
Performance
1.19 s
Security
HTTPS & header checks
Accessibility
0 issue(s) found
Organization
Company details published in this site's own structured data.
Meta tags
- Title
- Strava | Running, Cycling & Hiking App - Train, Track & Share
- Description
- Strava connects millions of runners, cyclists, hikers, walkers and other active people through the sports they love – all on our mobile app and website.
- Canonical
- https://www.strava.com/
- Language
- en-US
- Charset
- utf-8
- Viewport
- width=device-width
- Robots meta
- Manifest
Technologies
Detected frameworks, languages, and tools.
Hosting & CDN
- Hosting provider
- AWS
- CDN provider
- CloudFront
- IP address
- 108.159.80.50
- ASN
- AS16509 (AMAZON-02 - Amazon.com, Inc., US)
DNS records
| Type | Value |
|---|---|
| A |
|
| AAAA |
|
| MX | — |
| TXT | — |
| NS |
|
| CAA | — |
| CNAME |
|
| IPv6 support | Yes |
TLS / SSL certificate
- Version
- TLS 1.3
- Issuer
- GoDaddy.com, Inc.
- Subject
- *.strava.com
- Valid from
- Aug 22, 2025
- Valid to
- Sep 23, 2026
- Days until expiry
- 66
- SAN domains
- *.strava.com, strava.com
Security headers
- Strict-Transport-SecurityMissing
- Content-Security-PolicyMissing
- X-Frame-OptionsMissing
- X-Content-Type-OptionsMissing
- Referrer-PolicyMissing
- Permissions-PolicyMissing
Compression: gzip · 1 cookie(s) observed
Content & assets
Headings
H1 3 · H2 9 · H3 15
Links
27 internal · 14 external · 0 broken
Images
38 total · 0 missing alt
Scripts / Styles
19 scripts · 5 stylesheets
JS / CSS size
3.1 MB · 314 KB
Page size
572 KB
Robots.txt & Sitemap
- robots.txt
- Found
- Disallow rules
- 44
- sitemap.xml
- Found
- URLs in sitemap
- -1
SEO issues
- Title longer than 60 characters
- Multiple H1 headings found
Accessibility issues
No accessibility issues detected.
Scan details
- Requested URL
- https://strava.com
- Final URL
- https://www.strava.com/
- HTTP status
- 200
- HTTP version
- HTTP/2
- Response time
- 1.18 s
- HTML size
- 572 KB
- Redirect chain
- https://strava.com → https://www.strava.com/
Related websites
Same technology stack
intuit.com
Intuit®: Outdo your financial goals—all in one place
ventraip.net.au
VentraIP | Join Australia's #1 Digital Service Provider*
auth0.com
Secure AI Agent & User Authentication | Auth0
onrender.com
Render | The cloud for builders
crazygames.com
Free Online Games on CrazyGames | Play Now!
suno.com
Suno | AI Music Generator
Same hosting provider
datadoghq.com
Cloud Monitoring as a Service | Datadog
opera.com
Opera Web Browser | Faster, Safer, Smarter | Opera
logitech.com
Logitech India
dynatrace.com
Dynatrace | Observability built for the age of AI
medlineplus.gov
MedlinePlus - Health Information from the National Library of Medicine
zeasn.tv
Whale TV | Home
Frequently asked questions
- What technology does strava.com use?
- strava.com is built with Next.js, Google Analytics.
- Is strava.com secure (HTTPS)?
- Yes. strava.com uses TLS 1.3 with a certificate issued by GoDaddy.com, Inc., valid until Sep 23, 2026.
- Who hosts strava.com?
- strava.com is hosted on AWS, behind CloudFront CDN.
- What is strava.com's SEO score?
- strava.com scored 90/100 for SEO in the latest analysis (excellent).
- What is strava.com's overall website score?
- strava.com has an overall SiteGraph score of 73/100, combining SEO, performance, security, and accessibility.
- What company operates strava.com?
- strava.com is operated by Strava.
OpenGraph & Twitter Card
OpenGraph
Twitter Card