HTTP Headers: drupal.org
Security score: 60/100
🛡️ Security Headers
| Header | Status |
|---|---|
| Strict-Transport-Security | ✅ Present |
| Content-Security-Policy | ❌ Missing |
| X-Content-Type-Options | ✅ Present |
| X-Frame-Options | ✅ Present |
| X-XSS-Protection | ❌ Missing |
📋 All Response Headers
Accept-Ranges Age Cache-Control Connection Content-Encoding Content-Language Content-Length Content-Security-Policy Content-Type Date Etag Expires Fastly-Restarts Last-Modified Link Permissions-Policy Server Set-Cookie Strict-Transport-Security Vary Via X-Cache X-Cache-Hits X-Content-Type-Options X-Drupal-Cache X-Frame-Options X-Generator X-Served-By X-Timer X-UA-Compatible
🔧 More Tools for Drupal