kodutehnikaoutlet.ee
Grade A+ · 90/100 · 5/6 security headers present
Security Score
Security Headers
CSP Violations
Issues Found
Recommendations
CSP Analysis
connect-src 'self' https://*.google-analytics.com/ https://*.googletagmanager.com/; default-src 'self'; font-src data: https://fonts.gstatic.com; frame-src https://www.google.com/maps/ https://www.youtube.com/; img-src 'self' data: https://*.google-analytics.com/ https://*.googletagmanager.com/ https://www.facebook.com/; manifest-src 'self'; object-src 'self'; script-src 'self' 'sha256-2ywNPeK/kKXKot9CV7pU4OaPqCvdzexl36w8IFhswSI=' 'sha256-rCw2UQJeP+g5tdgbj8N0MNjKy2dsEHeFwxmb6Iyhv1E=' 'sha256-W1MD0NG2HtaeBtG85U2qSRcxz2TqruOEi4b3r+L24Y8=' https://www.googletagmanager.com/ https://www.google-analytics.com/ https://connect.facebook.net/; style-src 'self' 'sha256-2dO1zPnjICW4pm6BSSulKL7Fce+LeJtfCd9nB14TcjY=' 'sha256-5MoDhwaD5njBn5WpI7iG0IFh8rCIqsUfJvu2SpnbTps=' 'sha256-nx7T2vM3FG2GqDCK5NErQR6tT6iOS/rBjaBaUvmACC0=' https://fonts.googleapis.com/ https://www.googletagmanager.com/; worker-src 'self'
Directive Analysis
Security Headers
accelerometer=(self), ambient-light-sensor=(self), autoplay=(self), battery=(self), camera=(self), cross-origin-isolated=(self), display-capture=(self), document-domain=*, encrypted-media=(self), execution-while-not-rendered=*, execution-while-out-of-viewport=*, fullscreen=(self), geolocation=(self), gyroscope=(self), magnetometer=(self), microphone=(self), midi=(self), navigation-override=(self), payment=(self), picture-in-picture=*, publickey-credentials-get=(self), screen-wake-lock=(self), sync-xhr=*, usb=(self), web-share=(self), xr-spatial-tracking=(self)
Restricts which browser features (camera, microphone, geolocation) the page can use, limiting attack surface.
no-referrer
Controls how much referrer information is sent with requests, preventing data leaks to third parties.
Forces browsers to use HTTPS for all future requests, preventing man-in-the-middle attacks and SSL stripping.
How to add it:
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"SSL/TLS > Edge Certificates > Enable HSTS (toggle on, set max-age to 12 months, enable includeSubDomains)nosniff
Prevents browsers from MIME-sniffing responses away from the declared Content-Type, blocking drive-by downloads.
sameorigin
Prevents the page from being embedded in iframes, protecting against clickjacking attacks.
1; mode=block
Legacy XSS filter for older browsers. Modern browsers use CSP instead. Set to "0" to avoid false positives.
1 recommended security header is missing on kodutehnikaoutlet.ee.
Beyond headers: infrastructure exposure
via OSN, our sister projectSecurity headers protect the browser. OSN maps what's exposed underneath — servers, open ports, known CVEs, DNS and WHOIS.
kodutehnikaoutlet.ee
3 scans since 7/19/2025
Latest: 90/100
Total Scans
3
Latest Score
90/100
First Scan
7/19/2025
Last Scan
7/19/2025
Score Trend
Security score progression over 2 scans
Show off your security grade
Embed this badge on your site or README. It updates automatically after each scan and links back to this report.
<a href="https://headertest.com/results/kodutehnikaoutlet.ee" title="Security headers grade for kodutehnikaoutlet.ee — HeaderTest">
<img src="https://headertest.com/api/badge/kodutehnikaoutlet.ee" alt="HeaderTest security grade: A+ (90/100) for kodutehnikaoutlet.ee" />
</a>[](https://headertest.com/results/kodutehnikaoutlet.ee)