schneider-electric.ee
Grade A · 80/100 · 4/6 security headers present
Security Score
Security Headers
CSP Violations
Issues Found
Recommendations
CSP Analysis
default-src 'nonce-fbdeaa3d128a48ca682ce7daa2d29d24' 'nonce-sgo3un1q3uu3qskh' 'nonce-rAnd0m' 'self' interface.elbridge2.itek.de d2osz8slymlqdp.cloudfront.net *.schneider-electric.com service.force.com fonts.googleapis.com; report-uri https://sesdl.report-uri.com/r/t/csp/reportOnly; script-src 'nonce-fbdeaa3d128a48ca682ce7daa2d29d24' 'nonce-sgo3un1q3uu3qskh' 'nonce-rAnd0m' 'report-sample' 'self' blob: *.schneider-electric.com *.se.com www.gstatic.com *.decibelinsight.net *.salesforce.com se.my.salesforce-sites.com *.force.com *.salesforceliveagent.com www.youtube.com *.googleapis.com *.googlemaps.github.io googlemaps.github.io *.cookielaw.org resources.digital-cloud.medallia.eu munchkin.marketo.net cdn.syndication.twimg.com unpkg.com cdn.jsdelivr.net *.cloudfront.net www.google-analytics.com www.googletagmanager.com t.contentsquare.net app.contentsquare.com *.glaze.ai *.google.com *.google.com.sa *.google.com.my *.google.com.sg *.google.by *.documentforce.com *.demandbase.com zinfi.net google.ru *.execute-api.us-east-1.amazonaws.com www-ppr.sdl.partnerchannel.se.com *.go-mpulse.net *.akstat.io *.clipsal.com js-cdn.dynatrace.com *.kampyle.com snap.licdn.com www.googleadservices.com *.akamaihd.net *.doubleclick.net maps.googleapis.com *.visualwebsiteoptimizer.com app.vwo.com websdk.appsflyer.com seadvantage.my.site.com tags.tiqcdn.com tags.tiqcdn.cn tags-eu.tiqcdn.com *.tealiumiq.com se--uatbfo22.sandbox.my.salesforce-sites.com dev.visualwebsiteoptimizer.com seadvantage--qa.sandbox.my.site.com *.s3.amazonaws.com fonts.googleapis.com *.amazonaws.com se.my.salesforce.com resources.digital-cloud.medallia.eu/ img.youtube.com uatschneider.zinfi.net/ service.force.com i.ytimg.com *.bootstrapcdn.com *.twimg.com nebula-cdn.kampyle.com md-scp.kampyle.com maxcdn.bootstrapcdn.com www-sqe.se.com d2osz8slymlqdp.cloudfront.net *.cs197.force.com d.la3-c1cs-ia5.salesforceliveagent.com logs1241.xiti.com logs6.xiti.com se--c.na72.content.force.com https://cdn.cookielaw.org/scripttemplates/otSDKStub.js https://d2osz8slymlqdp.cloudfront.net/@quartzds/core/@1.0.0-beta.32/loader/index.js https://t.contentsquare.net/uxa/511da2a7e4509.js https://www-prd.start.sdl.se.com/ww/en/assets/v2/chat/newChat/js/chat.js https://www.googletagmanager.com/gtm.js https://www.se.com/lv/shop-static/packages/@se/web-ui/@3.28.1/se-components/se-components.esm.js https://www.youtube.com/iframe_api https://www.google-analytics.com/analytics.js https://abrtp1-cdn.marketo.com/rtp-api/v1/rtp.js https://abrtp1.marketo.com/gw1/trw https://connect.facebook.net/en_US/fbevents.js https://googleads.g.doubleclick.net/pagead/viewthroughconversion/* https://munchkin.marketo.net/munchkin.js https://rtp-static.marketo.com/rtp/libs/jquery/3.7.0/jquery.min.js https://s.go-mpulse.net/boomerang/XR4TT-L9EBU-2KFPC-LU3QU-W6RKY https://snap.licdn.com/li.lms-analytics/insight.min.js https://tag.demandbase.com/CQFNsh50.min.js https://websdk.appsflyer.com/ https://d.la3-c1cs-ia4.salesforceliveagent.com/chat/rest/Visitor/Availability.jsonp https://dzxlh9m36wv4u.cloudfront.net/dcrcoeai-chatbot-se.min.js https://munchkin.marketo.net/163/munchkin.js https://se--uatbfo22.sandbox.my.salesforce.com/embeddedservice/5.0/esw.min.js https://service.force.com/embeddedservice/5.0/utils/common.min.js https://www.se.com/assets-search/uiaas-search/v1.64.1/build/search.esm.js https://dev.visualwebsiteoptimizer.com/j.php https://dynamic.criteo.com/js/ld/ld.js https://p.teads.tv/teads-fellow.js https://abrtp1.marketo.com/gw1/msg https://cdn.evgnet.com/beacon/schneiderelectricsas/seprod/scripts/evergage.min.js https://d.la5-c1-ia5.salesforceliveagent.com/chat/rest/EmbeddedService/EmbeddedServiceConfig.jsonp https://nebula-cdn.kampyle.com/eu/we/300880/onsite/* https://rtp-static.marketo.com/rtp/libs/ga-integration-2.0.5.js https://se.my.salesforce.com/embeddedservice/5.0/esw.min.js https://service.force.com/embeddedservice/5.0/client/invite.esw.min.js https://abm-tracking.demandscience.com/tag.js https://c.la2-c2-ord.salesforceliveagent.com/content/g/js/46.0/deployment.js https://d.la2-c2-ord.salesforceliveagent.com/chat/rest/System/MultiNoun.jsonp https://tagmanager.schneider-electric.com/pes2/configuration-stat.js https://tracking.contanuity.com/tracking https://visitor-service.tealiumiq.com/schneider-electric/* https://abm-tracking.demandscience.com/page-tracking/demandscience-SchneiderElectric/https%3A%2F%2Fwww.se.com%2Fus%2Fen%2Fwork%2Fproducts%2Findustrial-automation-control%2Ffoxboro-dcs%2Fio-comms%2Fintelligent-enclosures.jsp https://cdn.jsdelivr.net/npm/@fingerprintjs/fingerprintjs@3/dist/fp.min.js https://d.la5-c1-ia4.salesforceliveagent.com/chat/rest/Visitor/Availability.jsonp https://d.la5-c1-ia5.salesforceliveagent.com/chat/rest/Visitor/Availability.jsonp https://dev.visualwebsiteoptimizer.com/j.php https://js.adsrvr.org/up_loader.1.1.0.js https://js.driftt.com/include/1713763200000/2cs3bpk9ps4n.js https://rtp-static.marketo.com/rtp/libs/jqueryui/1.13.2/jquery-custom-ui.min.js https://selectandconfig-widget.schneider-electric.com/release/wrapper/2.X/wrapper.min.js https://tags.tiqcdn.com/libs/tealiumjs/latest/tealium_collect.min.js; style-src 'nonce-sgo3un1q3uu3qskh' 'nonce-rAnd0m' 'report-sample' 'self' https://rtp-static.marketo.com https://www-prd.start.sdl.se.com https://*.se.com https://d2osz8slymlqdp.cloudfront.net https://fonts.googleapis.com https://service.force.com https://selectandconfig-widget.schneider-electric.com; object-src 'nonce-sgo3un1q3uu3qskh' 'nonce-rAnd0m' 'self' blob: *.s3.amazonaws.com docs.google.com view.officeapps.live.com; base-uri 'nonce-sgo3un1q3uu3qskh' 'nonce-rAnd0m' 'self' *.se.com md-scp.kampyle.com; script-src-attr 'unsafe-inline'; script-src-elem 'nonce-fbdeaa3d128a48ca682ce7daa2d29d24' 'nonce-sgo3un1q3uu3qskh' 'nonce-rAnd0m' 'self' https://connect.facebook.net/signals/config/*; connect-src 'nonce-sgo3un1q3uu3qskh' 'nonce-rAnd0m' 'self' *.se.com *.onetrust.com *.doubleclick.net *.google.com *.company-target.com *.demandbase.com *.cookielaw.org d2jlsbmrqq5whn.cloudfront.net https://analytics.se.com https://ibc-flow.techtarget.com/a/gif.gif https://api.se.com https://c.az.contentsquare.net https://cdn.cookielaw.org https://k-eu1.az.contentsquare.net https://q-eu1.az.contentsquare.net https://stats.g.doubleclick.net https://www.google-analytics.com https://www.google.com https://178-gyd-668.mktoresp.com https://abrtp1.marketo.com https://api.company-target.com https://c.go-mpulse.net https://nebula-cdn.kampyle.com https://px.ads.linkedin.com https://tag-logger.demandbase.com https://udc-neb.kampyle.com https://api.qa.se.com https://schneiderelectricsas.germany-2.evergage.com https://srm.aa.contentsquare.net https://sslwidget.criteo.com https://t.teads.tv https://trial-eum-clienttons-s.akamaihd.net https://trial-eum-clientnsv4-s.akamaihd.net https://*.akstat.io https://banner.appsflyer.com https://collect.tealiumiq.com https://creatives-cdn.appsflyer.com https://geolocation.onetrust.com https://privacyportal-eu.onetrust.com https://api.channelsight.com https://cm.teads.tv https://dev.visualwebsiteoptimizer.com https://intentstream.contanuity.com https://www.google-analytics.com/g/collect https://l.contentsquare.net; font-src 'nonce-sgo3un1q3uu3qskh' 'nonce-rAnd0m' 'self' data: * https://anima-uploads.s3.amazonaws.com https://*.se.com https://d2osz8slymlqdp.cloudfront.net https://fonts.gstatic.com; frame-src 'nonce-sgo3un1q3uu3qskh' 'nonce-rAnd0m' 'self' 'strict-dynamic' *.company-target.com *.schneider-electric.com *.se.com medallia.eu www.google.com *.youtube.com *.googlemaps.github.io/* *.force.com *.my.salesforce.com nebula-cdn.kampyle.com www.facebook.com snap.licdn.com *.glaze.ai service.force.com se.my.salesforce-sites.com app.vwo.com *.visualwebsiteoptimizer.com *.d19dpgcs1g8vj2.amplifyapp.com d2osz8slymlqdp.cloudfront.net uiaas.csxd.contentsquare.net seadvantage.my.site.com docs.google.com view.officeapps.live.com tags.tiqcdn.com tags.tiqcdn.cn tags-eu.tiqcdn.com *.tealiumiq.com *.d2ouk6oneq65rc.amplifyapp.com se--uatbfo22.sandbox.my.salesforce-sites.com proof-of-execution-qa.s3.amazonaws.com proof-of-execution-uat.s3.amazonaws.com se-pw-dev.s3.amazonaws.com se-pw-1qa.s3.amazonaws.com se-pw-uat.s3.amazonaws.com se-pw-preprod.s3.amazonaws.com se-pw-prod.s3.amazonaws.com seadvantage--qa.sandbox.my.site.com https://csxd.contentsquare.net https://nebula-cdn.kampyle.com https://s.company-target.com https://service.force.com https://su.symex.be https://*.fls.doubleclick.net https://td.doubleclick.net https://fledge.teads.tv https://gumi.criteo.com https://td.doubleclick.net https://insight.adsrvr.org https://js.driftt.com https://myschneider.schneider-electric.com https://match.adsrvr.org; img-src 'nonce-sgo3un1q3uu3qskh' 'nonce-rAnd0m' 'self' data: mediastream: * cdn.cookielaw.org *.d2ouk6oneq65rc.amplifyapp.com dev.visualwebsiteoptimizer.com udc-neb.kampyle.com https://c.az.contentsquare.net https://img.youtube.com https://intstatcheck.wsecure.schneider-electric.com https://www-prd.start.sdl.se.com https://www.google.co.in https://www.google.com https://dev.visualwebsiteoptimizer.com https://id.rlcdn.com https://px.ads.linkedin.com https://s.ml-attr.com https://www.facebook.com https://download.schneider-electric.com https://cm.teads.tv https://ad.doubleclick.net https://udc-neb.kampyle.com https://www.googletagmanager.com https://secure.adnxs.com https://um.simpli.fi https://bttrack.com https://insight.adsrvr.org https://se.com https://t.co https://t.teads.tv; manifest-src 'nonce-sgo3un1q3uu3qskh' 'nonce-rAnd0m' 'self'; media-src 'nonce-sgo3un1q3uu3qskh' 'nonce-rAnd0m' 'self' https://www-prd.start.staging.sdl.se.com *.s3.amazonaws.com https://js.driftt.com; child-src 'nonce-sgo3un1q3uu3qskh' 'nonce-rAnd0m' 'self' blob:; frame-ancestors 'nonce-sgo3un1q3uu3qskh' 'nonce-rAnd0m' 'self' *.schneider-electric.com *.se.com *.googlemaps.github.io/* *.ariba.com *.glaze.ai d2ouk6oneq65rc.amplifyapp.com exr5xi19jd.execute-api.us-east-1.amazonaws.com pprod.d19dpgcs1g8vj2.amplifyapp.com proof-of-execution-qa.s3.amazonaws.com proof-of-execution-uat.s3.amazonaws.com se-pw-dev.s3.amazonaws.com se-pw-1qa.s3.amazonaws.com se-pw-uat.s3.amazonaws.com se-pw-preprod.s3.amazonaws.com se-pw-prod.s3.amazonaws.com; worker-src 'nonce-sgo3un1q3uu3qskh' 'nonce-rAnd0m' 'self' data: blob:;
Directive Analysis
Security Headers
Restricts which browser features (camera, microphone, geolocation) the page can use, limiting attack surface.
How to add it:
add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;Header always set Permissions-Policy "camera=(), microphone=(), geolocation=()"Rules > Transform Rules > HTTP Response Header Modification > Set Permissions-Policy valueControls how much referrer information is sent with requests, preventing data leaks to third parties.
How to add it:
add_header Referrer-Policy "strict-origin-when-cross-origin" always;Header always set Referrer-Policy "strict-origin-when-cross-origin"Rules > Transform Rules > HTTP Response Header Modification > Set Referrer-Policy to "strict-origin-when-cross-origin"max-age=31536000; includeSubDomains; preload
Forces browsers to use HTTPS for all future requests, preventing man-in-the-middle attacks and SSL stripping.
nosniff
Prevents browsers from MIME-sniffing responses away from the declared Content-Type, blocking drive-by downloads.
deny
Prevents the page from being embedded in iframes, protecting against clickjacking attacks.
1; mode=block
Legacy XSS filter for older browsers. Modern browsers use CSP instead. Set to "0" to avoid false positives.
2 recommended security headers are missing on schneider-electric.ee.
Beyond headers: infrastructure exposure
via OSN, our sister projectSecurity headers protect the browser. OSN maps what's exposed underneath — servers, open ports, known CVEs, DNS and WHOIS.
schneider-electric.ee
3 scans since 7/19/2025
Latest: 80/100
Total Scans
3
Latest Score
80/100
First Scan
7/19/2025
Last Scan
7/19/2025
Score Trend
Security score progression over 2 scans
Show off your security grade
Embed this badge on your site or README. It updates automatically after each scan and links back to this report.
<a href="https://headertest.com/results/schneider-electric.ee" title="Security headers grade for schneider-electric.ee — HeaderTest">
<img src="https://headertest.com/api/badge/schneider-electric.ee" alt="HeaderTest security grade: A (80/100) for schneider-electric.ee" />
</a>[](https://headertest.com/results/schneider-electric.ee)