HTTP Headers: coreinfrastructure.org

Security score: 0/100

🛡️ Security Headers
HeaderStatus
Strict-Transport-Security❌ Missing
Content-Security-Policy❌ Missing
X-Content-Type-Options❌ Missing
X-Frame-Options❌ Missing
X-XSS-Protection❌ Missing
📋 All Response Headers
Accept-Ranges
Access-Control-Allow-Headers
Access-Control-Allow-Methods
Access-Control-Allow-Origin
Age
Cache-Control
Connection
Content-Encoding
Content-Length
Content-Security-Policy
Content-Type
Cross-Origin-Embedder-Policy
Cross-Origin-Embedder-Policy-Report-Only
Cross-Origin-Opener-Policy
Cross-Origin-Opener-Policy-Report-Only
Cross-Origin-Resource-Policy
Date
Link
Permissions-Policy
Referrer-Policy
Server
Strict-Transport-Security
Vary
Via
X-Cache
X-Cache-Hits
X-Content-Security-Policy
X-Content-Type-Options
X-Frame-Options
X-Pantheon-Styx-Hostname
X-Permitted-Cross-Domain-Policies
X-Served-By
X-Styx-Req-Id
X-Tec-Api-Origin
X-Tec-Api-Root
X-Tec-Api-Version
X-Timer
X-Xss-Protection