datascale

Check explainer

Security headers

HSTS, X-Frame-Options, and CSP are the security baseline every audit checks.

  • to review
  • ok

What we check

Checks HSTS, X-Frame-Options, and Content-Security-Policy in the response headers.

Why it matters

HSTS, X-Frame-Options, and CSP are the security baseline every audit checks.

Common causes

The most common triggers for this finding. Expand this section with real-world examples.

How to fix it

Configure HSTS + CSP with frame-ancestors, then target securityheaders.com grade B.

  • Q01
    What does a failing Security headers finding mean?

    HSTS, X-Frame-Options, and CSP are the security baseline every audit checks. Configure HSTS + CSP with frame-ancestors, then target securityheaders.com grade B.

  • Q02
    How do you fix Security headers?

    Configure HSTS + CSP with frame-ancestors, then target securityheaders.com grade B.