Loading controls...
Benchmark: Security Headers Best Practices
Description
Security headers are HTTP response headers that define whether a set of security precautions should be activated or deactivated on the web browser. It will protect your website from some common attacks like XSS, code injection, clickjacking, etc. This benchmark performs a check for following HTTP response headers:
- Content-Security-Policy
- HTTP Strict-Transport-Security
- Permissions-Policy
- Referrer-Policy
- X-Content-Type-Options
- X-Frame-Options
Usage
Browse dashboards and select Security Headers Best Practices:
steampipe dashboardOr run the benchmarks in your terminal:
steampipe check net_insights.benchmark.security_headers_best_practicesSnapshot and share results via Steampipe Cloud:
steampipe loginsteampipe check --share net_insights.benchmark.security_headers_best_practicesControls
- Site headers must contain Strict-Transport-Security
- Site headers must contain Content-Security-Policy
- Site headers must contain X-Frame-Options
- Site headers must contain X-Content-Type-Options
- Site headers must contain Referrer-Policy
- Site headers must contain Permissions-Policy