Fly.io
A platform that runs applications as lightweight VMs called Machines across global regions, with Fly Volumes for persistence and a first-party Managed Postgres service.
Usage-based, pro-rated per Machine on CPU/RAM presets plus per-GB storage; tiered Managed Postgres plans; paid support tiers sold separately; discounts for annual prepaid compute reservations
Proprietary
Appears in 1 guide
Where it ranks
Guides that include Fly.io.
Security headers
What Fly.io's website sends to your browser.
Scanned 2026-08-25. Grade headers C, scoring 60 out of 100.
+
Content-Security-Policy is set
−
No Strict-Transport-Security, so browsers may still attempt plain HTTP
+
X-Content-Type-Options: nosniff is set
+
CSP frame-ancestors directive is set
+
Referrer-Policy is set
−
No Permissions-Policy, so powerful browser features are not restricted
+
Cross-Origin-Opener-Policy is set
−
No Cross-Origin-Resource-Policy
−
Server version or framework disclosed via Server/X-Powered-By
This is one narrow, automated check of the HTTP response headers on the vendor's own website. It says nothing about how the product itself is built, how it stores your data, or whether it has ever been audited. A good grade here is a small signal that somebody was paying attention.