85 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
The access-control-allow-credentials response header of a URL: whether it is present, its value, and a one-line reading of what the value means (or the risk of its absence for security headers). One header, one answer, f...
The x-cache response header of a URL: whether it is present, its value, and a one-line reading of what the value means (or the risk of its absence for security headers). One header, one answer, for audits and monitoring...
The expect-ct response header of a URL: whether it is present, its value, and a one-line reading of what the value means (or the risk of its absence for security headers). One header, one answer, for audits and monitorin...
The x-frame-options response header of a URL: whether it is present, its value, and a one-line reading of what the value means (or the risk of its absence for security headers). One header, one answer, for audits and mon...
The referrer-policy response header of a URL: whether it is present, its value, and a one-line reading of what the value means (or the risk of its absence for security headers). One header, one answer, for audits and mon...
The x-xss-protection response header of a URL: whether it is present, its value, and a one-line reading of what the value means (or the risk of its absence for security headers). One header, one answer, for audits and mo...
The cache-control response header of a URL: whether it is present, its value, and a one-line reading of what the value means (or the risk of its absence for security headers). One header, one answer, for audits and monit...
The etag response header of a URL: whether it is present, its value, and a one-line reading of what the value means (or the risk of its absence for security headers). One header, one answer, for audits and monitoring scr...
The last-modified response header of a URL: whether it is present, its value, and a one-line reading of what the value means (or the risk of its absence for security headers). One header, one answer, for audits and monit...
The expires response header of a URL: whether it is present, its value, and a one-line reading of what the value means (or the risk of its absence for security headers). One header, one answer, for audits and monitoring...
The vary response header of a URL: whether it is present, its value, and a one-line reading of what the value means (or the risk of its absence for security headers). One header, one answer, for audits and monitoring scr...
The content-encoding response header of a URL: whether it is present, its value, and a one-line reading of what the value means (or the risk of its absence for security headers). One header, one answer, for audits and mo...
The content-type response header of a URL: whether it is present, its value, and a one-line reading of what the value means (or the risk of its absence for security headers). One header, one answer, for audits and monito...
The content-language response header of a URL: whether it is present, its value, and a one-line reading of what the value means (or the risk of its absence for security headers). One header, one answer, for audits and mo...
The server response header of a URL: whether it is present, its value, and a one-line reading of what the value means (or the risk of its absence for security headers). One header, one answer, for audits and monitoring s...
The x-powered-by response header of a URL: whether it is present, its value, and a one-line reading of what the value means (or the risk of its absence for security headers). One header, one answer, for audits and monito...
The via response header of a URL: whether it is present, its value, and a one-line reading of what the value means (or the risk of its absence for security headers). One header, one answer, for audits and monitoring scri...
The age response header of a URL: whether it is present, its value, and a one-line reading of what the value means (or the risk of its absence for security headers). One header, one answer, for audits and monitoring scri...
The alt-svc response header of a URL: whether it is present, its value, and a one-line reading of what the value means (or the risk of its absence for security headers). One header, one answer, for audits and monitoring...
The link response header of a URL: whether it is present, its value, and a one-line reading of what the value means (or the risk of its absence for security headers). One header, one answer, for audits and monitoring scr...
The x-robots-tag response header of a URL: whether it is present, its value, and a one-line reading of what the value means (or the risk of its absence for security headers). One header, one answer, for audits and monito...
The report-to response header of a URL: whether it is present, its value, and a one-line reading of what the value means (or the risk of its absence for security headers). One header, one answer, for audits and monitorin...
The nel response header of a URL: whether it is present, its value, and a one-line reading of what the value means (or the risk of its absence for security headers). One header, one answer, for audits and monitoring scri...
The set-cookie response header of a URL: whether it is present, its value, and a one-line reading of what the value means (or the risk of its absence for security headers). One header, one answer, for audits and monitori...