Nearly half of the web's biggest sites send no Content-Security-Policy
One check of each of the 1,000 most visited sites: which security headers they send, how well, and what a small site can take from it.
7 min read
Tag
HSTS
2articles
How to check your TLS configuration in 2026: protocols, ciphers, certificates, HSTS and the changes that catch sites out
Ten checks, the 2026 changes, and how to read a grade.
13 min read