Render
A platform-as-a-service that deploys web services, private services, background workers, and cron jobs from a Git repo, alongside managed PostgreSQL and a Redis-compatible key-value store.
Free Hobby tier with hard limits; flat monthly workspace plan (no per-seat charge) plus separate per-service compute and usage-based bandwidth overages
Proprietary
Appears in 1 guide
Where it ranks
Guides that include Render.
Security headers
What Render's website sends to your browser.
Scanned 2026-08-25. Grade headers B, scoring 80 out of 100.
+
Content-Security-Policy is set
+
Strict-Transport-Security is set
+
X-Content-Type-Options: nosniff is set
+
X-Frame-Options is set
+
Referrer-Policy is set
−
No Permissions-Policy, so powerful browser features are not restricted
−
No Cross-Origin-Opener-Policy
−
No Cross-Origin-Resource-Policy
+
No server-version or X-Powered-By disclosure
This is one narrow, automated check of the HTTP response headers on the vendor's own website. It says nothing about how the product itself is built, how it stores your data, or whether it has ever been audited. A good grade here is a small signal that somebody was paying attention.