CHECK GLOSSARY · SEC-001

Missing security headers

In plain words: Basic security headers block clickjacking, MIME sniffing and referrer leaks.

How to fix it

Add X-Content-Type-Options, Referrer-Policy and a CSP or X-Frame-Options.

Official sources

• OWASP: secure headers

Related checks

• TTFB-001: Slow server response
• CACHE-001: Weak browser caching
• SEC-002: Server version disclosed
• NOTFOUND-001: Soft 404 or bare 404 page

Check my site free → All checks