Who this is for
Engineering, security governance, and digital teams that need an evidence-backed first pass.
What we examine
- CSP presence and framing directives
- HSTS coverage on HTTPS responses
- X-Content-Type-Options and Referrer-Policy
- Permissions-Policy and legacy X-Frame-Options behavior