HTTP Headers: aesop.com
Security score: 40/100
🛡️ Security Headers
| Header | Status |
|---|---|
| Strict-Transport-Security | ❌ Missing |
| Content-Security-Policy | ❌ Missing |
| X-Content-Type-Options | ✅ Present |
| X-Frame-Options | ✅ Present |
| X-XSS-Protection | ❌ Missing |
📋 All Response Headers
Cache-Control Connection Content-Length Content-Type Date ETag Expires Pragma Server-Timing Strict-Transport-Security Vary X-Amz-Cf-Id X-Amz-Cf-Pop x-nextjs-cache
🔧 More Tools for Aesop