HTTP Headers: ny.gov

Security score: 60/100

🛡️ Security Headers
HeaderStatus
Strict-Transport-Security✅ Present
Content-Security-Policy❌ Missing
X-Content-Type-Options✅ Present
X-Frame-Options✅ Present
X-XSS-Protection❌ Missing
📋 All Response Headers
Age
CF-Cache-Status
CF-RAY
Cache-Control
Connection
Content-Encoding
Content-Type
Content-language
Date
Expires
Last-Modified
Referrer-Policy
Server
Set-Cookie
Strict-Transport-Security
Vary
Via
X-AH-Environment
X-Cache
X-Cache-Hits
X-Content-Type-Options
X-Drupal-Dynamic-Cache
X-Frame-Options
X-Generator
X-Request-ID
X-XSS-Protection