Website basics
What a missing header really means
A header is a browser instruction, not a complete security assessment. Learn what to ask before changing it.
Read the guide →Resources / Practical guides
What to do after the scan.
Short guides for owners working with a developer, agency or hosting provider.
Work with your developer
Turn a scan into a useful task
Pass on the observation, context and scan time. Ask for evidence when the change is complete.
Use the handover checklist →Know the limits
Why a grade is not a guarantee
External checks cannot see every account, plugin, backup or internal control.
Understand your result →For practitioners
The previous technical resources remain available.