domains / families / security / performing-security-headers-audit

performing-security-headers-audit

separate

Auditing HTTP security headers including CSP, HSTS, X-Frame-Options,

When to use

• During authorized web application security assessments as a standard configuration review
• When evaluating browser-level protections against XSS, clickjacking, and data leakage
• For compliance assessments requiring security header implementation (PCI DSS, SOC 2)
• When performing initial reconnaissance to identify easy-win security improvements
• During CI/CD pipeline security gate checks for new deployments

Skill page

Source