205375

Total Scans

116192

High Risk Sites

88186

Medium Risk Sites

997

Low Risk Sites


Test For Security Headers & Get Instant Scan Report



Security Report Summary

Risk Level
Low
Site https://pentest-tools.com/
IP Address 76.76.21.21
Headers Information STRICT-TRANSPORT-SECURITY PERMISSIONS-POLICY X-FRAME-OPTIONS CONTENT-SECURITY-POLICY X-CONTENT-TYPE-OPTIONS X-XSS-PROTECTION REFERRER-POLICY X-PERMITTED-CROSS-DOMAIN-POLICIES
Date/Time Nov. 5, 2024, 5:32 p.m.
Re-Scan

Available Security Headers

STRICT-TRANSPORT-SECURITY
Ensures HTTPS-only access.
PERMISSIONS-POLICY
Restricts feature access.
X-FRAME-OPTIONS
Prevents clickjacking.
CONTENT-SECURITY-POLICY
Protects from XSS.
X-CONTENT-TYPE-OPTIONS
Prevents MIME-type sniffing.
X-XSS-PROTECTION
Blocks XSS attacks.
REFERRER-POLICY
Controls Referer header.
X-PERMITTED-CROSS-DOMAIN-POLICIES
Manages cross-domain requests.

Raw Headers

Age
0
Cache-Control
public, max-age=0, must-revalidate
Content-Encoding
gzip
Content-Security-Policy
base-uri 'self'; font-src 'self' data: https://*.pentest-tools.com https://vercel.live https://fonts.gstatic.com https://script.hotjar.com https://assets.vercel.com self; form-action 'self' https://*.pentest-tools.com; frame-ancestors 'self' https://*.pentest-tools.com https://*.vercel.app https://pentesttools.onfastspring.com https://*.cloudfront.net; img-src 'self' https: data: https://*.pentest-tools.com https://pentesttools.onfastspring.com https://*.google-analytics.com https://googletagmanager.com https://*.googletagmanager.com https://*.analytics.google.com https://*.google.com https://ssl.gstatic.com https://www.gstatic.com https://*.g.doubleclick.net https://googleads.g.doubleclick.net https://google.com https://static.hotjar.com https://script.hotjar.com https://*.onfastspring.com self cdn-cookieyes.com; object-src none; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https://*.pentest-tools.com https://*.googletagmanager.com https://vercel.live/fonts https://fonts.googleapis.com https://googletagmanager.com https://tagmanager.google.com https://static.hotjar.com https://script.hotjar.com https://*.onfastspring.com self unsafe-inline; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.pentest-tools.com https://bat.bing.com https://*.impactcdn.com https://pentest-tools.pxf.io https://cdn.jsdelivr.net/npm/workbox-cdn@5.1.4/workbox/workbox-sw.js https://cdn.jsdelivr.net/npm/workbox-cdn@5.1.4/workbox/workbox-core.prod.js https://cdn.jsdelivr.net/npm/workbox-cdn@5.1.4/workbox/workbox-precaching.prod.js https://cdn.jsdelivr.net/npm/workbox-cdn@5.1.4/workbox/workbox-strategies.prod.js https://cdn.jsdelivr.net/npm/workbox-cdn@5.1.4/workbox/workbox-routing.prod.js https://www.google.com https://*.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.googleadservices.com https://*.adservice.google.com https://adservice.google.com https://tagmanager.google.com https://googleads.g.doubleclick.net https://*.doubleclick.net https://www.googleadservices.com https://*.googlesyndication.com https://static.hotjar.com https://script.hotjar.com https://vercel.live https://cdn.vercel-insights.com https://va.vercel-scripts.com https://*.sentry.com https://*.sentry-cdn.com https://*.onfastspring.com https://*.cloudfront.net https://*.hs-scripts.com https://js.hubspotfeedback.com/feedbackweb-new.js https://js.hubspot.com https://*.usemessages.com https://*.hs-analytics.net https://*.hscollectedforms.net https://*.hs-banner.com https://*.usefathom.com self cdn-cookieyes.com unsafe-inline; upgrade-insecure-requests; default-src 'self' https://*.pentest-tools.com self; worker-src 'self' blob:; connect-src 'self' ws: wss: https://*.pentest-tools.com https://bat.bing.com https://*.impactcdn.com https://pentest-tools.pxf.io https://content.pentest-tools.com https://google-analytics.com https://*.google-analytics.com https://googletagmanager.com https://*.googletagmanager.com https://stats.g.doubleclick.net https://googleadservices.com https://*.googleadservices.com https://www.google.co.in https://www.google.co.id https://www.google.com https://analytics.google.com https://adservice.google.com https://*.google.com https://google.com https://www.google.id https://www.google.com.br https://www.google.co.uk https://www.google.ca https://www.google.com.au https://www.google.ro https://*.analytics.google.com https://*.g.doubleclick.net https://*.googlesyndication.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://vitals.vercel-insights.com https://vitals.vercel-analytics.com https://vercel.live https://*.sentry.io https://*.onfastspring.com https://js.hs-banner.com https://*.hubspot.com https://api.hsforms.com https://*.hscollectedforms.net https://*.usefathom.com self *.cookieyes.com cdn-cookieyes.com; frame-src 'self' https://*.pentest-tools.com https://*.googletagmanager.com https://*.optimize.google.com https://*.youtube.com https://*.youtube-nocookie.com https://*.simplecast.com https://td.doubleclick.net https://vars.hotjar.com https://vercel.live https://*.onfastspring.com https://*.hubspot.com https://*.linkedin.com; report-uri https://o1040042.ingest.sentry.io/api/6008920/security/?sentry_key=ea284f2b974341f888d14e98a637f6e0&sentry_environment=production;
Content-Type
text/html;charset=utf-8
Cross-Origin-Opener-Policy
same-origin
Date
Tue, 05 Nov 2024 12:02:20 GMT
Origin-Agent-Cluster
?1
Permissions-Policy
camera=(), display-capture=(), fullscreen=(), geolocation=(), microphone=()
Referrer-Policy
no-referrer
Server
Vercel
Set-Cookie
firstpage=https%3A%2F%2Fwww.pentest-tools.com%2F; Domain=.pentest-tools.com; Path=/; Expires=Thu, 05 Dec 2024 12:02:20 GMT
Strict-Transport-Security
max-age=15552000; includeSubDomains;
X-Content-Type-Options
nosniff
X-Dns-Prefetch-Control
off
X-Download-Options
noopen
X-Frame-Options
SAMEORIGIN
X-Permitted-Cross-Domain-Policies
none
X-Robots-Tag
index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1
X-Vercel-Cache
MISS
X-Vercel-Id
bom1::lhr1::s8tmj-1730808140722-fff953884dd3
X-Xss-Protection
0

Other Tools

Web Scanners

Wordpress Test

Web Scanners

Website Security Test

Web Scanners

Reconnaissance

Web Scanners

Malicious URL Test

Web Scanners

Malicious IP Test

Web Scanners

SSL Security Test