HSTS with Cloudflare Pages?


today I tried the new feature cloudflare pages, I am excited. But is it possible to send the HSTS headers to the browser. Currently they are not transmitted despite the cloudflare setting being enabled.

Or am I doing something wrong there?

Gah! It sounds like Pages is missing a handful of features normally controlled by a regular account. I suggest you open a ticket. I hope they’re making a list of stuff that Pages needs.

To contact Cloudflare Customer Support, login & go to https://dash.cloudflare.com/?account=support and select get more help. If you receive an automatic response that does not help you, please reply and indicate you need more help.


As a follow up to this. I do indeed have HSTS headers sent to the browser. However, Hardenize complains that the domain isn’t preloaded despite this being declared in the policy.

Could this also be a teething issue with Pages or should one expected that something is incorrect on my end?

Did you submit your domain for preloading?



Ah! Pays to be humble.

Thank you so much – I’m sorry for bothering you and the community with such a noob question.

I’ve submitted the domain for inclusion now. Guess this will take a while.

1 Like