web.headersSecurity headers
Checks CSP, HSTS, framing, MIME sniffing, referrer and permissions policies, cross-origin isolation, version disclosure, CORS and cookie flags on the target URL.
- Engine
- Built-in
- Targets
- URL
- Areas
- Security, Best practices, Privacy
- Runs
- By default, when the target applies
- Network
- Only the target itself
Run only this auditor
bunx openaudit https://example.com --only web.headersBuilt into openaudit; nothing to install.