metasite.lt
Grade F · 0/100 · 1/6 security headers present
Security Score
Security Headers
CSP Violations
Issues Found
Recommendations
CSP Analysis
This site does not set a Content-Security-Policy HTTP header. Without CSP, browsers allow all inline scripts, eval(), and resources from any origin, leaving the site vulnerable to Cross-Site Scripting (XSS) attacks.
Security Headers
Forces browsers to use HTTPS for all future requests, preventing man-in-the-middle attacks and SSL stripping.
How to add it:
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"SSL/TLS > Edge Certificates > Enable HSTS (toggle on, set max-age to 12 months, enable includeSubDomains)1 recommended security header is missing on metasite.lt.
Recommendations
- →No CSP headers found - implement Content Security Policy
Beyond headers: infrastructure exposure
via OSN, our sister projectSecurity headers protect the browser. OSN maps what's exposed underneath — servers, open ports, known CVEs, DNS and WHOIS.
metasite.lt
1 scan since 7/12/2025
Latest: 0/100
Total Scans
1
Latest Score
0/100
First Scan
7/12/2025
Last Scan
7/12/2025
Scan History
| Date | Score | CSP | Headers | Issues | Action |
|---|---|---|---|---|---|
| Jul 12, 2025 | F (0) | No | 1/6 | 0 | View → |
Show off your security grade
Embed this badge on your site or README. It updates automatically after each scan and links back to this report.
<a href="https://headertest.com/results/metasite.lt" title="Security headers grade for metasite.lt — HeaderTest">
<img src="https://headertest.com/api/badge/metasite.lt" alt="HeaderTest security grade: F (0/100) for metasite.lt" />
</a>[](https://headertest.com/results/metasite.lt)