HTTP Headers: visitcalifornia.com
Security score: 40/100
🛡️ Security Headers
| Header | Status |
|---|---|
| Strict-Transport-Security | ❌ Missing |
| Content-Security-Policy | ❌ Missing |
| X-Content-Type-Options | ✅ Present |
| X-Frame-Options | ✅ Present |
| X-XSS-Protection | ❌ Missing |
📋 All Response Headers
Accept-Ranges Age Alt-Svc Cache-Control Connection Content-Encoding Content-Length Content-Security-Policy Content-Type Date ETag Expires Last-Modified Server Strict-Transport-Security X-Content-Type-Options X-Frame-Options X-GUploader-UploadID X-Sucuri-Cache X-Sucuri-ID X-XSS-Protection access-control-allow-origin x-goog-generation x-goog-hash x-goog-meta-goog-reserved-file-mtime x-goog-metageneration x-goog-storage-class x-goog-stored-content-encoding x-goog-stored-content-length
🔧 More Tools for Visitcalifornia