CATEGORY 4 / 59

En-têtes HTTP de sécurité

18 checks in the reference catalogue. Each row appears under this category in AxiSecurity campaigns and full reports.

Badge guide: Free = passive diagnostic or public signal; Paid = bounded or authenticated automated/technical check; Expert = internal evidence, human audit, controlled load or mandate-based penetration testing.

C04-T001
source 2

Content-Security-Policy

Authorisation: public_passive

View tutorial →

Free

demo · preproduction · production

Passive automatic

Automatic function: headers.csp

C04-T002
source 2

CSP réellement restrictive

Authorisation: public_passive

View tutorial →

Free

demo · preproduction · production

Passive automatic

Automatic function: headers.csp_restrictive

C04-T003
source 2

Absence de unsafe-inline non justifié

Authorisation: public_passive

View tutorial →

Free

demo · preproduction · production

Passive automatic

Automatic function: headers.csp_unsafe_inline

C04-T004
source 2

Absence de unsafe-eval non justifié

Authorisation: public_passive

View tutorial →

Free

demo · preproduction · production

Passive automatic

Automatic function: headers.csp_unsafe_eval

C04-T005
source 2

Frame-ancestors

Authorisation: public_passive

View tutorial →

Free

demo · preproduction · production

Passive automatic

Automatic function: headers.frame_ancestors

C04-T006
source 2

X-Frame-Options

Authorisation: public_passive

View tutorial →

Free

demo · preproduction · production

Passive automatic

Automatic function: headers.x_frame_options

C04-T007
source 2

X-Content-Type-Options

Authorisation: public_passive

View tutorial →

Free

demo · preproduction · production

Passive automatic

Automatic function: headers.nosniff

C04-T008
source 2

Referrer-Policy

Authorisation: public_passive

View tutorial →

Free

demo · preproduction · production

Passive automatic

Automatic function: headers.referrer

C04-T009
source 2

Permissions-Policy

Authorisation: public_passive

View tutorial →

Free

demo · preproduction · production

Passive automatic

Automatic function: headers.permissions

C04-T010
source 3

Strict-Transport-Security

Authorisation: public_passive

View tutorial →

Free

demo · preproduction · production

Passive automatic

Automatic function: headers.hsts

C04-T011
source 3

Cross-Origin-Opener-Policy

Authorisation: public_passive

View tutorial →

Free

demo · preproduction · production

Passive automatic

Automatic function: headers.coop

C04-T012
source 3

Cross-Origin-Resource-Policy

Authorisation: public_passive

View tutorial →

Free

demo · preproduction · production

Passive automatic

Automatic function: headers.corp

C04-T013
source 3

Cross-Origin-Embedder-Policy lorsque pertinent

Authorisation: public_passive

View tutorial →

Free

demo · preproduction · production

Passive automatic

Automatic function: headers.coep

C04-T014
source 3

Cache-Control des pages sensibles

Authorisation: public_passive

View tutorial →

Free

demo · preproduction · production

Passive automatic

Automatic function: publicfree.c04.t014

C04-T015
source 3

Pragma sur contenu confidentiel si nécessaire

Authorisation: public_passive

View tutorial →

Free

demo · preproduction · production

Passive automatic

Automatic function: publicfree.c04.t015

C04-T016
source 3

Suppression Server header détaillé

Authorisation: public_passive

View tutorial →

Free

demo · preproduction · production

Passive automatic

Automatic function: headers.server_disclosure

C04-T017
source 3

Suppression X-Powered-By

Authorisation: public_passive

View tutorial →

Free

demo · preproduction · production

Passive automatic

Automatic function: headers.powered_by

C04-T018
source 3

Absence d'informations de version

Authorisation: public_passive

View tutorial →

Free

demo · preproduction · production

Passive automatic

Automatic function: headers.version_disclosure