HTTP Headers: japan-experience.com

Security score: 40/100

🛡️ Security Headers
HeaderStatus
Strict-Transport-Security❌ Missing
Content-Security-Policy❌ Missing
X-Content-Type-Options✅ Present
X-Frame-Options✅ Present
X-XSS-Protection❌ Missing
📋 All Response Headers
Age
Alt-Svc
Cache-Control
Content-Type
Content-language
Date
Expires
Set-Cookie
Strict-Transport-Security
Transfer-Encoding
Vary
Via
X-Content-Type-Options
X-Drupal-Dynamic-Cache
X-Frame-Options
X-UA-Compatible
x-dru-pod-name
x-session-id