CATEGORY 59 / 59

AxiSecurity 993 technical extension

27 checks in the reference catalogue. Each row appears under this category in AxiSecurity campaigns and full reports.

Badge guide: Free = passive diagnostic or public signal; Paid = bounded or authenticated automated/technical check; Expert = internal evidence, human audit, controlled load or mandate-based penetration testing.

C59-T001
source 0

Publication of a usable security.txt file

Authorisation: verified_safe

View tutorial →

Expert

demo · preproduction · production

Controlled automatic

Automatic function: advanced.security_txt.status

C59-T002
source 0

Security contact declared in security.txt

Authorisation: verified_safe

View tutorial →

Expert

demo · preproduction · production

Controlled automatic

Automatic function: advanced.security_txt.contact

C59-T003
source 0

Valid security.txt expiry date

Authorisation: verified_safe

View tutorial →

Expert

demo · preproduction · production

Controlled automatic

Automatic function: advanced.security_txt.expires

C59-T004
source 0

Canonical HTTPS URL for security.txt

Authorisation: verified_safe

View tutorial →

Expert

demo · preproduction · production

Controlled automatic

Automatic function: advanced.security_txt.canonical

C59-T005
source 0

CSP default-src directive defined

Authorisation: verified_safe

View tutorial →

Expert

demo · preproduction · production

Controlled automatic

Automatic function: advanced.csp.default_src

C59-T006
source 0

Restrictive CSP object-src directive

Authorisation: verified_safe

View tutorial →

Expert

demo · preproduction · production

Controlled automatic

Automatic function: advanced.csp.object_src

C59-T007
source 0

Restrictive CSP base-uri directive

Authorisation: verified_safe

View tutorial →

Expert

demo · preproduction · production

Controlled automatic

Automatic function: advanced.csp.base_uri

C59-T008
source 0

Restricted CSP form-action directive

Authorisation: verified_safe

View tutorial →

Expert

demo · preproduction · production

Controlled automatic

Automatic function: advanced.csp.form_action

C59-T009
source 0

CSP frame-ancestors directive defined

Authorisation: verified_safe

View tutorial →

Expert

demo · preproduction · production

Controlled automatic

Automatic function: advanced.csp.frame_ancestors

C59-T010
source 0

No CSP unsafe-inline or unsafe-eval tokens

Authorisation: verified_safe

View tutorial →

Expert

demo · preproduction · production

Controlled automatic

Automatic function: advanced.csp.unsafe_tokens

C59-T011
source 0

CSP upgrade of insecure resources

Authorisation: verified_safe

View tutorial →

Expert

demo · preproduction · production

Controlled automatic

Automatic function: advanced.csp.upgrade_insecure

C59-T012
source 0

Cross-Origin-Opener-Policy isolation

Authorisation: verified_safe

View tutorial →

Expert

demo · preproduction · production

Controlled automatic

Automatic function: advanced.cross_origin.opener

C59-T013
source 0

Cross-Origin-Resource-Policy isolation

Authorisation: verified_safe

View tutorial →

Expert

demo · preproduction · production

Controlled automatic

Automatic function: advanced.cross_origin.resource

C59-T014
source 0

Cross-Origin-Embedder-Policy isolation

Authorisation: verified_safe

View tutorial →

Expert

demo · preproduction · production

Controlled automatic

Automatic function: advanced.cross_origin.embedder

C59-T015
source 0

__Host- cookie prefix consistency

Authorisation: verified_safe

View tutorial →

Expert

demo · preproduction · production

Controlled automatic

Automatic function: advanced.cookie.host_prefix

C59-T016
source 0

__Secure- cookie prefix consistency

Authorisation: verified_safe

View tutorial →

Expert

demo · preproduction · production

Controlled automatic

Automatic function: advanced.cookie.secure_prefix

C59-T017
source 0

SameSite=None cookies require Secure

Authorisation: verified_safe

View tutorial →

Expert

demo · preproduction · production

Controlled automatic

Automatic function: advanced.cookie.none_requires_secure

C59-T018
source 0

Partitioned cookies require Secure

Authorisation: verified_safe

View tutorial →

Expert

demo · preproduction · production

Controlled automatic

Automatic function: advanced.cookie.partitioned_secure

C59-T019
source 0

DMARC policy application percentage

Authorisation: verified_safe

View tutorial →

Expert

demo · preproduction · production

Controlled automatic

Automatic function: advanced.mail.dmarc_percentage

C59-T020
source 0

DMARC report collection

Authorisation: verified_safe

View tutorial →

Expert

demo · preproduction · production

Controlled automatic

Automatic function: advanced.mail.dmarc_reporting

C59-T021
source 0

Controlled SPF policy termination

Authorisation: verified_safe

View tutorial →

Expert

demo · preproduction · production

Controlled automatic

Automatic function: advanced.mail.spf_all

C59-T022
source 0

Certificate authorities restricted by CAA

Authorisation: verified_safe

View tutorial →

Expert

demo · preproduction · production

Controlled automatic

Automatic function: advanced.mail.caa_issue

C59-T023
source 0

Certificate renewal margin above 45 days

Authorisation: verified_safe

View tutorial →

Expert

demo · preproduction · production

Controlled automatic

Automatic function: advanced.tls.certificate_45d

C59-T024
source 0

HSTS preload declaration prerequisites

Authorisation: verified_safe

View tutorial →

Expert

demo · preproduction · production

Controlled automatic

Automatic function: advanced.hsts.preload_ready

C59-T025
source 0

Short HTTP redirect chain

Authorisation: verified_safe

View tutorial →

Expert

demo · preproduction · production

Controlled automatic

Automatic function: advanced.http.redirect_hops

C59-T026
source 0

Cache protection for sensitive responses

Authorisation: verified_safe

View tutorial →

Expert

demo · preproduction · production

Controlled automatic

Automatic function: advanced.http.cache_sensitive

C59-T027
source 0

Password forms served exclusively over HTTPS

Authorisation: verified_safe

View tutorial →

Expert

demo · preproduction · production

Controlled automatic

Automatic function: advanced.html.password_form_https