← All Results
Domain History

schneider-electric.lt

Grade A · 80/100 · 4/6 security headers present

Security Score

A
80/ 100

Security Headers

4/ 6

CSP Violations

NoViolations

Issues Found

0Issues

Recommendations

0Available

CSP Analysis

Content Security PolicyHIGH
default-src 'nonce-570009de9240f641763997b0846fb01e' 'nonce-sgo3un1q3uu3qskh' 'nonce-rAnd0m' 'self' interface.elbridge2.itek.de d2osz8slymlqdp.cloudfront.net *.schneider-electric.com service.force.com fonts.googleapis.com; report-uri https://sesdl.report-uri.com/r/t/csp/reportOnly; script-src 'nonce-570009de9240f641763997b0846fb01e' 'nonce-sgo3un1q3uu3qskh' 'nonce-rAnd0m' 'report-sample' 'self' blob: *.schneider-electric.com *.se.com www.gstatic.com *.decibelinsight.net *.salesforce.com se.my.salesforce-sites.com *.force.com *.salesforceliveagent.com www.youtube.com *.googleapis.com *.googlemaps.github.io googlemaps.github.io *.cookielaw.org resources.digital-cloud.medallia.eu munchkin.marketo.net cdn.syndication.twimg.com unpkg.com cdn.jsdelivr.net *.cloudfront.net www.google-analytics.com www.googletagmanager.com t.contentsquare.net app.contentsquare.com *.glaze.ai *.google.com *.google.com.sa *.google.com.my *.google.com.sg *.google.by *.documentforce.com *.demandbase.com zinfi.net google.ru *.execute-api.us-east-1.amazonaws.com www-ppr.sdl.partnerchannel.se.com *.go-mpulse.net *.akstat.io *.clipsal.com js-cdn.dynatrace.com *.kampyle.com snap.licdn.com www.googleadservices.com *.akamaihd.net *.doubleclick.net maps.googleapis.com *.visualwebsiteoptimizer.com app.vwo.com websdk.appsflyer.com seadvantage.my.site.com tags.tiqcdn.com tags.tiqcdn.cn tags-eu.tiqcdn.com *.tealiumiq.com se--uatbfo22.sandbox.my.salesforce-sites.com dev.visualwebsiteoptimizer.com seadvantage--qa.sandbox.my.site.com *.s3.amazonaws.com fonts.googleapis.com *.amazonaws.com se.my.salesforce.com resources.digital-cloud.medallia.eu/ img.youtube.com uatschneider.zinfi.net/ service.force.com i.ytimg.com *.bootstrapcdn.com *.twimg.com nebula-cdn.kampyle.com md-scp.kampyle.com maxcdn.bootstrapcdn.com www-sqe.se.com d2osz8slymlqdp.cloudfront.net *.cs197.force.com d.la3-c1cs-ia5.salesforceliveagent.com logs1241.xiti.com logs6.xiti.com se--c.na72.content.force.com https://cdn.cookielaw.org/scripttemplates/otSDKStub.js https://d2osz8slymlqdp.cloudfront.net/@quartzds/core/@1.0.0-beta.32/loader/index.js https://t.contentsquare.net/uxa/511da2a7e4509.js https://www-prd.start.sdl.se.com/ww/en/assets/v2/chat/newChat/js/chat.js https://www.googletagmanager.com/gtm.js https://www.se.com/lv/shop-static/packages/@se/web-ui/@3.28.1/se-components/se-components.esm.js https://www.youtube.com/iframe_api https://www.google-analytics.com/analytics.js https://abrtp1-cdn.marketo.com/rtp-api/v1/rtp.js https://abrtp1.marketo.com/gw1/trw https://connect.facebook.net/en_US/fbevents.js https://googleads.g.doubleclick.net/pagead/viewthroughconversion/* https://munchkin.marketo.net/munchkin.js https://rtp-static.marketo.com/rtp/libs/jquery/3.7.0/jquery.min.js https://s.go-mpulse.net/boomerang/XR4TT-L9EBU-2KFPC-LU3QU-W6RKY https://snap.licdn.com/li.lms-analytics/insight.min.js https://tag.demandbase.com/CQFNsh50.min.js https://websdk.appsflyer.com/ https://d.la3-c1cs-ia4.salesforceliveagent.com/chat/rest/Visitor/Availability.jsonp https://dzxlh9m36wv4u.cloudfront.net/dcrcoeai-chatbot-se.min.js https://munchkin.marketo.net/163/munchkin.js https://se--uatbfo22.sandbox.my.salesforce.com/embeddedservice/5.0/esw.min.js https://service.force.com/embeddedservice/5.0/utils/common.min.js https://www.se.com/assets-search/uiaas-search/v1.64.1/build/search.esm.js https://dev.visualwebsiteoptimizer.com/j.php https://dynamic.criteo.com/js/ld/ld.js https://p.teads.tv/teads-fellow.js https://abrtp1.marketo.com/gw1/msg https://cdn.evgnet.com/beacon/schneiderelectricsas/seprod/scripts/evergage.min.js https://d.la5-c1-ia5.salesforceliveagent.com/chat/rest/EmbeddedService/EmbeddedServiceConfig.jsonp https://nebula-cdn.kampyle.com/eu/we/300880/onsite/* https://rtp-static.marketo.com/rtp/libs/ga-integration-2.0.5.js https://se.my.salesforce.com/embeddedservice/5.0/esw.min.js https://service.force.com/embeddedservice/5.0/client/invite.esw.min.js https://abm-tracking.demandscience.com/tag.js https://c.la2-c2-ord.salesforceliveagent.com/content/g/js/46.0/deployment.js https://d.la2-c2-ord.salesforceliveagent.com/chat/rest/System/MultiNoun.jsonp https://tagmanager.schneider-electric.com/pes2/configuration-stat.js https://tracking.contanuity.com/tracking https://visitor-service.tealiumiq.com/schneider-electric/* https://abm-tracking.demandscience.com/page-tracking/demandscience-SchneiderElectric/https%3A%2F%2Fwww.se.com%2Fus%2Fen%2Fwork%2Fproducts%2Findustrial-automation-control%2Ffoxboro-dcs%2Fio-comms%2Fintelligent-enclosures.jsp https://cdn.jsdelivr.net/npm/@fingerprintjs/fingerprintjs@3/dist/fp.min.js https://d.la5-c1-ia4.salesforceliveagent.com/chat/rest/Visitor/Availability.jsonp https://d.la5-c1-ia5.salesforceliveagent.com/chat/rest/Visitor/Availability.jsonp https://dev.visualwebsiteoptimizer.com/j.php https://js.adsrvr.org/up_loader.1.1.0.js https://js.driftt.com/include/1713763200000/2cs3bpk9ps4n.js https://rtp-static.marketo.com/rtp/libs/jqueryui/1.13.2/jquery-custom-ui.min.js https://selectandconfig-widget.schneider-electric.com/release/wrapper/2.X/wrapper.min.js https://tags.tiqcdn.com/libs/tealiumjs/latest/tealium_collect.min.js; style-src 'nonce-sgo3un1q3uu3qskh' 'nonce-rAnd0m' 'report-sample' 'self' https://rtp-static.marketo.com https://www-prd.start.sdl.se.com https://*.se.com https://d2osz8slymlqdp.cloudfront.net https://fonts.googleapis.com https://service.force.com https://selectandconfig-widget.schneider-electric.com; object-src 'nonce-sgo3un1q3uu3qskh' 'nonce-rAnd0m' 'self' blob: *.s3.amazonaws.com docs.google.com view.officeapps.live.com; base-uri 'nonce-sgo3un1q3uu3qskh' 'nonce-rAnd0m' 'self' *.se.com md-scp.kampyle.com; script-src-attr 'unsafe-inline'; script-src-elem 'nonce-570009de9240f641763997b0846fb01e' 'nonce-sgo3un1q3uu3qskh' 'nonce-rAnd0m' 'self' https://connect.facebook.net/signals/config/*; connect-src 'nonce-sgo3un1q3uu3qskh' 'nonce-rAnd0m' 'self' *.se.com *.onetrust.com *.doubleclick.net *.google.com *.company-target.com *.demandbase.com *.cookielaw.org d2jlsbmrqq5whn.cloudfront.net https://analytics.se.com https://ibc-flow.techtarget.com/a/gif.gif https://api.se.com https://c.az.contentsquare.net https://cdn.cookielaw.org https://k-eu1.az.contentsquare.net https://q-eu1.az.contentsquare.net https://stats.g.doubleclick.net https://www.google-analytics.com https://www.google.com https://178-gyd-668.mktoresp.com https://abrtp1.marketo.com https://api.company-target.com https://c.go-mpulse.net https://nebula-cdn.kampyle.com https://px.ads.linkedin.com https://tag-logger.demandbase.com https://udc-neb.kampyle.com https://api.qa.se.com https://schneiderelectricsas.germany-2.evergage.com https://srm.aa.contentsquare.net https://sslwidget.criteo.com https://t.teads.tv https://trial-eum-clienttons-s.akamaihd.net https://trial-eum-clientnsv4-s.akamaihd.net https://*.akstat.io https://banner.appsflyer.com https://collect.tealiumiq.com https://creatives-cdn.appsflyer.com https://geolocation.onetrust.com https://privacyportal-eu.onetrust.com https://api.channelsight.com https://cm.teads.tv https://dev.visualwebsiteoptimizer.com https://intentstream.contanuity.com https://www.google-analytics.com/g/collect https://l.contentsquare.net; font-src 'nonce-sgo3un1q3uu3qskh' 'nonce-rAnd0m' 'self' data: * https://anima-uploads.s3.amazonaws.com https://*.se.com https://d2osz8slymlqdp.cloudfront.net https://fonts.gstatic.com; frame-src 'nonce-sgo3un1q3uu3qskh' 'nonce-rAnd0m' 'self' 'strict-dynamic' *.company-target.com *.schneider-electric.com *.se.com medallia.eu www.google.com *.youtube.com *.googlemaps.github.io/* *.force.com *.my.salesforce.com nebula-cdn.kampyle.com www.facebook.com snap.licdn.com *.glaze.ai service.force.com se.my.salesforce-sites.com app.vwo.com *.visualwebsiteoptimizer.com *.d19dpgcs1g8vj2.amplifyapp.com d2osz8slymlqdp.cloudfront.net uiaas.csxd.contentsquare.net seadvantage.my.site.com docs.google.com view.officeapps.live.com tags.tiqcdn.com tags.tiqcdn.cn tags-eu.tiqcdn.com *.tealiumiq.com *.d2ouk6oneq65rc.amplifyapp.com se--uatbfo22.sandbox.my.salesforce-sites.com proof-of-execution-qa.s3.amazonaws.com proof-of-execution-uat.s3.amazonaws.com se-pw-dev.s3.amazonaws.com se-pw-1qa.s3.amazonaws.com se-pw-uat.s3.amazonaws.com se-pw-preprod.s3.amazonaws.com se-pw-prod.s3.amazonaws.com seadvantage--qa.sandbox.my.site.com https://csxd.contentsquare.net https://nebula-cdn.kampyle.com https://s.company-target.com https://service.force.com https://su.symex.be https://*.fls.doubleclick.net https://td.doubleclick.net https://fledge.teads.tv https://gumi.criteo.com https://td.doubleclick.net https://insight.adsrvr.org https://js.driftt.com https://myschneider.schneider-electric.com https://match.adsrvr.org; img-src 'nonce-sgo3un1q3uu3qskh' 'nonce-rAnd0m' 'self' data: mediastream: * cdn.cookielaw.org *.d2ouk6oneq65rc.amplifyapp.com dev.visualwebsiteoptimizer.com udc-neb.kampyle.com https://c.az.contentsquare.net https://img.youtube.com https://intstatcheck.wsecure.schneider-electric.com https://www-prd.start.sdl.se.com https://www.google.co.in https://www.google.com https://dev.visualwebsiteoptimizer.com https://id.rlcdn.com https://px.ads.linkedin.com https://s.ml-attr.com https://www.facebook.com https://download.schneider-electric.com https://cm.teads.tv https://ad.doubleclick.net https://udc-neb.kampyle.com https://www.googletagmanager.com https://secure.adnxs.com https://um.simpli.fi https://bttrack.com https://insight.adsrvr.org https://se.com https://t.co https://t.teads.tv; manifest-src 'nonce-sgo3un1q3uu3qskh' 'nonce-rAnd0m' 'self'; media-src 'nonce-sgo3un1q3uu3qskh' 'nonce-rAnd0m' 'self' https://www-prd.start.staging.sdl.se.com *.s3.amazonaws.com https://js.driftt.com; child-src 'nonce-sgo3un1q3uu3qskh' 'nonce-rAnd0m' 'self' blob:; frame-ancestors 'nonce-sgo3un1q3uu3qskh' 'nonce-rAnd0m' 'self' *.schneider-electric.com *.se.com *.googlemaps.github.io/* *.ariba.com *.glaze.ai d2ouk6oneq65rc.amplifyapp.com exr5xi19jd.execute-api.us-east-1.amazonaws.com pprod.d19dpgcs1g8vj2.amplifyapp.com proof-of-execution-qa.s3.amazonaws.com proof-of-execution-uat.s3.amazonaws.com se-pw-dev.s3.amazonaws.com se-pw-1qa.s3.amazonaws.com se-pw-uat.s3.amazonaws.com se-pw-preprod.s3.amazonaws.com se-pw-prod.s3.amazonaws.com; worker-src 'nonce-sgo3un1q3uu3qskh' 'nonce-rAnd0m' 'self' data: blob:;
Directive Analysis
default-srcLOW
interface.elbridge2.itek.de *.schneider-electric.com 'nonce-rAnd0m' d2osz8slymlqdp.cloudfront.net 'nonce-570009de9240f641763997b0846fb01e' service.force.com 'self' fonts.googleapis.com 'nonce-sgo3un1q3uu3qskh'
•Missing recommended values for default-src: self
report-uriLOW
https://sesdl.report-uri.com/r/t/csp/reportOnly
script-srcMEDIUM
*.execute-api.us-east-1.amazonaws.com https://munchkin.marketo.net/munchkin.js https://nebula-cdn.kampyle.com/eu/we/300880/onsite/* https://tags.tiqcdn.com/libs/tealiumjs/latest/tealium_collect.min.js https://dynamic.criteo.com/js/ld/ld.js https://googleads.g.doubleclick.net/pagead/viewthroughconversion/* *.amazonaws.com https://t.contentsquare.net/uxa/511da2a7e4509.js *.go-mpulse.net *.demandbase.com logs1241.xiti.com https://www.youtube.com/iframe_api https://www.se.com/lv/shop-static/packages/@se/web-ui/@3.28.1/se-components/se-components.esm.js https://munchkin.marketo.net/163/munchkin.js google.ru maps.googleapis.com blob: https://abrtp1.marketo.com/gw1/msg app.contentsquare.com uatschneider.zinfi.net/ *.googlemaps.github.io *.akstat.io se.my.salesforce.com https://c.la2-c2-ord.salesforceliveagent.com/content/g/js/46.0/deployment.js unpkg.com www.google-analytics.com https://tracking.contanuity.com/tracking https://websdk.appsflyer.com/ *.google.com.sa resources.digital-cloud.medallia.eu/ se.my.salesforce-sites.com https://p.teads.tv/teads-fellow.js https://abm-tracking.demandscience.com/tag.js *.se.com seadvantage.my.site.com websdk.appsflyer.com d2osz8slymlqdp.cloudfront.net *.bootstrapcdn.com https://abrtp1.marketo.com/gw1/trw cdn.jsdelivr.net logs6.xiti.com *.cloudfront.net www-ppr.sdl.partnerchannel.se.com seadvantage--qa.sandbox.my.site.com maxcdn.bootstrapcdn.com www.gstatic.com *.s3.amazonaws.com tags.tiqcdn.cn nebula-cdn.kampyle.com fonts.googleapis.com https://rtp-static.marketo.com/rtp/libs/ga-integration-2.0.5.js https://rtp-static.marketo.com/rtp/libs/jqueryui/1.13.2/jquery-custom-ui.min.js https://www-prd.start.sdl.se.com/ww/en/assets/v2/chat/newChat/js/chat.js *.salesforce.com *.google.com.my munchkin.marketo.net *.force.com https://d.la5-c1-ia5.salesforceliveagent.com/chat/rest/Visitor/Availability.jsonp *.googleapis.com *.google.com.sg https://dev.visualwebsiteoptimizer.com/j.php https://www.googletagmanager.com/gtm.js https://abrtp1-cdn.marketo.com/rtp-api/v1/rtp.js *.documentforce.com www.googleadservices.com https://js.adsrvr.org/up_loader.1.1.0.js https://cdn.cookielaw.org/scripttemplates/otSDKStub.js https://d.la3-c1cs-ia4.salesforceliveagent.com/chat/rest/Visitor/Availability.jsonp *.tealiumiq.com https://tagmanager.schneider-electric.com/pes2/configuration-stat.js *.decibelinsight.net www.youtube.com https://d.la5-c1-ia5.salesforceliveagent.com/chat/rest/EmbeddedService/EmbeddedServiceConfig.jsonp 'nonce-rAnd0m' https://se.my.salesforce.com/embeddedservice/5.0/esw.min.js https://s.go-mpulse.net/boomerang/XR4TT-L9EBU-2KFPC-LU3QU-W6RKY 'nonce-sgo3un1q3uu3qskh' www-sqe.se.com https://service.force.com/embeddedservice/5.0/utils/common.min.js *.clipsal.com https://visitor-service.tealiumiq.com/schneider-electric/* snap.licdn.com *.schneider-electric.com https://www.google-analytics.com/analytics.js *.cookielaw.org https://dzxlh9m36wv4u.cloudfront.net/dcrcoeai-chatbot-se.min.js *.google.by *.cs197.force.com https://cdn.jsdelivr.net/npm/@fingerprintjs/fingerprintjs@3/dist/fp.min.js resources.digital-cloud.medallia.eu 'nonce-570009de9240f641763997b0846fb01e' service.force.com https://d2osz8slymlqdp.cloudfront.net/@quartzds/core/@1.0.0-beta.32/loader/index.js *.visualwebsiteoptimizer.com https://cdn.evgnet.com/beacon/schneiderelectricsas/seprod/scripts/evergage.min.js i.ytimg.com app.vwo.com https://snap.licdn.com/li.lms-analytics/insight.min.js *.kampyle.com md-scp.kampyle.com *.twimg.com se--c.na72.content.force.com 'report-sample' *.google.com https://d.la5-c1-ia4.salesforceliveagent.com/chat/rest/Visitor/Availability.jsonp https://js.driftt.com/include/1713763200000/2cs3bpk9ps4n.js googlemaps.github.io t.contentsquare.net https://connect.facebook.net/en_US/fbevents.js *.doubleclick.net tags-eu.tiqcdn.com se--uatbfo22.sandbox.my.salesforce-sites.com https://rtp-static.marketo.com/rtp/libs/jquery/3.7.0/jquery.min.js https://se--uatbfo22.sandbox.my.salesforce.com/embeddedservice/5.0/esw.min.js https://www.se.com/assets-search/uiaas-search/v1.64.1/build/search.esm.js *.akamaihd.net https://selectandconfig-widget.schneider-electric.com/release/wrapper/2.X/wrapper.min.js cdn.syndication.twimg.com *.salesforceliveagent.com dev.visualwebsiteoptimizer.com https://tag.demandbase.com/CQFNsh50.min.js img.youtube.com https://service.force.com/embeddedservice/5.0/client/invite.esw.min.js www.googletagmanager.com tags.tiqcdn.com https://abm-tracking.demandscience.com/page-tracking/demandscience-SchneiderElectric/https%3A%2F%2Fwww.se.com%2Fus%2Fen%2Fwork%2Fproducts%2Findustrial-automation-control%2Ffoxboro-dcs%2Fio-comms%2Fintelligent-enclosures.jsp zinfi.net https://d.la2-c2-ord.salesforceliveagent.com/chat/rest/System/MultiNoun.jsonp 'self' d.la3-c1cs-ia5.salesforceliveagent.com js-cdn.dynatrace.com *.glaze.ai
•Missing recommended values for script-src: sha384-, sha512-, nonce-, sha256-, self
•No nonces or hashes used for script-src
style-srcLOW
https://www-prd.start.sdl.se.com https://selectandconfig-widget.schneider-electric.com https://d2osz8slymlqdp.cloudfront.net 'nonce-rAnd0m' https://service.force.com 'report-sample' https://*.se.com 'self' https://rtp-static.marketo.com 'nonce-sgo3un1q3uu3qskh' https://fonts.googleapis.com
•Missing recommended values for style-src: sha384-, sha512-, nonce-, sha256-, self
object-srcLOW
docs.google.com view.officeapps.live.com 'nonce-rAnd0m' blob: 'self' *.s3.amazonaws.com 'nonce-sgo3un1q3uu3qskh'
•Missing recommended values for object-src: none
base-uriLOW
md-scp.kampyle.com 'nonce-rAnd0m' *.se.com 'self' 'nonce-sgo3un1q3uu3qskh'
•Missing recommended values for base-uri: none, self
script-src-attrHIGH
'unsafe-inline'
•Unknown directive: script-src-attr
•Unsafe inline execution allowed in script-src-attr
script-src-elemLOW
'nonce-rAnd0m' 'nonce-570009de9240f641763997b0846fb01e' https://connect.facebook.net/signals/config/* 'self' 'nonce-sgo3un1q3uu3qskh'
•Unknown directive: script-src-elem
connect-srcLOW
https://www.google.com https://q-eu1.az.contentsquare.net https://trial-eum-clienttons-s.akamaihd.net 'nonce-rAnd0m' *.se.com https://geolocation.onetrust.com https://stats.g.doubleclick.net *.google.com https://analytics.se.com https://trial-eum-clientnsv4-s.akamaihd.net https://abrtp1.marketo.com https://udc-neb.kampyle.com 'nonce-sgo3un1q3uu3qskh' https://k-eu1.az.contentsquare.net https://schneiderelectricsas.germany-2.evergage.com https://api.channelsight.com *.demandbase.com https://px.ads.linkedin.com *.doubleclick.net https://collect.tealiumiq.com https://api.company-target.com https://178-gyd-668.mktoresp.com https://*.akstat.io https://intentstream.contanuity.com https://t.teads.tv https://api.qa.se.com *.onetrust.com https://ibc-flow.techtarget.com/a/gif.gif d2jlsbmrqq5whn.cloudfront.net *.cookielaw.org https://tag-logger.demandbase.com https://www.google-analytics.com https://privacyportal-eu.onetrust.com *.company-target.com https://c.go-mpulse.net https://sslwidget.criteo.com https://api.se.com https://l.contentsquare.net https://nebula-cdn.kampyle.com https://srm.aa.contentsquare.net https://c.az.contentsquare.net https://cdn.cookielaw.org 'self' https://creatives-cdn.appsflyer.com https://dev.visualwebsiteoptimizer.com https://cm.teads.tv https://banner.appsflyer.com https://www.google-analytics.com/g/collect
•Missing recommended values for connect-src: self
font-srcHIGH
https://fonts.gstatic.com data: https://d2osz8slymlqdp.cloudfront.net 'nonce-rAnd0m' https://*.se.com 'self' 'nonce-sgo3un1q3uu3qskh' * https://anima-uploads.s3.amazonaws.com
•Overly permissive wildcard (*) in font-src
•Missing recommended values for font-src: self
frame-srcLOW
*.tealiumiq.com 'strict-dynamic' 'nonce-rAnd0m' *.se.com proof-of-execution-qa.s3.amazonaws.com https://csxd.contentsquare.net seadvantage.my.site.com https://gumi.criteo.com d2osz8slymlqdp.cloudfront.net https://js.driftt.com 'nonce-sgo3un1q3uu3qskh' proof-of-execution-uat.s3.amazonaws.com https://fledge.teads.tv https://myschneider.schneider-electric.com uiaas.csxd.contentsquare.net se-pw-dev.s3.amazonaws.com www.facebook.com se-pw-uat.s3.amazonaws.com *.googlemaps.github.io/* *.my.salesforce.com medallia.eu tags-eu.tiqcdn.com se--uatbfo22.sandbox.my.salesforce-sites.com seadvantage--qa.sandbox.my.site.com tags.tiqcdn.cn nebula-cdn.kampyle.com https://*.fls.doubleclick.net snap.licdn.com *.schneider-electric.com www.google.com docs.google.com https://insight.adsrvr.org view.officeapps.live.com *.force.com *.d2ouk6oneq65rc.amplifyapp.com *.youtube.com https://service.force.com *.company-target.com *.d19dpgcs1g8vj2.amplifyapp.com https://match.adsrvr.org https://td.doubleclick.net tags.tiqcdn.com se-pw-preprod.s3.amazonaws.com https://s.company-target.com https://nebula-cdn.kampyle.com se-pw-1qa.s3.amazonaws.com https://su.symex.be service.force.com 'self' *.visualwebsiteoptimizer.com se.my.salesforce-sites.com app.vwo.com se-pw-prod.s3.amazonaws.com *.glaze.ai
•Missing recommended values for frame-src: self
img-srcHIGH
https://www.google.com https://img.youtube.com https://download.schneider-electric.com 'nonce-rAnd0m' https://udc-neb.kampyle.com 'nonce-sgo3un1q3uu3qskh' * https://t.co https://px.ads.linkedin.com https://www.googletagmanager.com https://www.facebook.com https://s.ml-attr.com https://se.com udc-neb.kampyle.com https://t.teads.tv https://bttrack.com https://id.rlcdn.com data: *.d2ouk6oneq65rc.amplifyapp.com https://insight.adsrvr.org dev.visualwebsiteoptimizer.com https://um.simpli.fi https://www.google.co.in https://ad.doubleclick.net https://secure.adnxs.com cdn.cookielaw.org https://intstatcheck.wsecure.schneider-electric.com https://www-prd.start.sdl.se.com https://c.az.contentsquare.net mediastream: 'self' https://dev.visualwebsiteoptimizer.com https://cm.teads.tv
•Overly permissive wildcard (*) in img-src
•Missing recommended values for img-src: self
manifest-srcLOW
'nonce-rAnd0m' 'nonce-sgo3un1q3uu3qskh' 'self'
•Missing recommended values for manifest-src: self
media-srcLOW
'nonce-rAnd0m' https://www-prd.start.staging.sdl.se.com *.s3.amazonaws.com 'self' https://js.driftt.com 'nonce-sgo3un1q3uu3qskh'
•Missing recommended values for media-src: self
child-srcLOW
'nonce-rAnd0m' 'nonce-sgo3un1q3uu3qskh' blob: 'self'
•Unknown directive: child-src
frame-ancestorsLOW
exr5xi19jd.execute-api.us-east-1.amazonaws.com se-pw-1qa.s3.amazonaws.com *.ariba.com *.schneider-electric.com se-pw-dev.s3.amazonaws.com se-pw-prod.s3.amazonaws.com se-pw-uat.s3.amazonaws.com *.googlemaps.github.io/* 'nonce-rAnd0m' *.se.com d2ouk6oneq65rc.amplifyapp.com proof-of-execution-qa.s3.amazonaws.com pprod.d19dpgcs1g8vj2.amplifyapp.com 'self' se-pw-preprod.s3.amazonaws.com 'nonce-sgo3un1q3uu3qskh' proof-of-execution-uat.s3.amazonaws.com *.glaze.ai
•Missing recommended values for frame-ancestors: none, self
worker-srcLOW
data: 'nonce-rAnd0m' blob: 'self' 'nonce-sgo3un1q3uu3qskh'
•Missing recommended values for worker-src: none, self

Security Headers

✗Permissions-PolicyMissing

Restricts which browser features (camera, microphone, geolocation) the page can use, limiting attack surface.

How to add it:

nginx
add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
apache
Header always set Permissions-Policy "camera=(), microphone=(), geolocation=()"
cloudflare
Rules > Transform Rules > HTTP Response Header Modification > Set Permissions-Policy value
✗Referrer-PolicyMissing

Controls how much referrer information is sent with requests, preventing data leaks to third parties.

How to add it:

nginx
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
apache
Header always set Referrer-Policy "strict-origin-when-cross-origin"
cloudflare
Rules > Transform Rules > HTTP Response Header Modification > Set Referrer-Policy to "strict-origin-when-cross-origin"
✓Strict-Transport-SecurityPresent

max-age=31536000; includeSubDomains; preload

Forces browsers to use HTTPS for all future requests, preventing man-in-the-middle attacks and SSL stripping.

✓X-Content-Type-OptionsPresent

nosniff

Prevents browsers from MIME-sniffing responses away from the declared Content-Type, blocking drive-by downloads.

✓X-Frame-OptionsPresent

deny

Prevents the page from being embedded in iframes, protecting against clickjacking attacks.

✓X-XSS-ProtectionPresent

1; mode=block

Legacy XSS filter for older browsers. Modern browsers use CSP instead. Set to "0" to avoid false positives.

2 recommended security headers are missing on schneider-electric.lt.

Beyond headers: infrastructure exposure

via OSN, our sister project

Security headers protect the browser. OSN maps what's exposed underneath — servers, open ports, known CVEs, DNS and WHOIS.

See what the internet sees about schneider-electric.ltWeak headers often come with other exposure — check the full picture.

schneider-electric.lt

3 scans since 7/16/2025

A

Latest: 80/100

Total Scans

3

Latest Score

80/100

First Scan

7/16/2025

Last Scan

7/16/2025

Score Trend

Security score progression over 2 scans

Scan History

DateScoreCSPHeadersIssuesAction
Jul 16, 2025
A (80)
No
4/60View →
Jul 16, 2025
A (80)
No
4/60View →

Show off your security grade

Embed this badge on your site or README. It updates automatically after each scan and links back to this report.

HeaderTest security grade: A (80/100) for schneider-electric.lt
HTML
<a href="https://headertest.com/results/schneider-electric.lt" title="Security headers grade for schneider-electric.lt — HeaderTest">
  <img src="https://headertest.com/api/badge/schneider-electric.lt" alt="HeaderTest security grade: A (80/100) for schneider-electric.lt" />
</a>
Markdown
[![HeaderTest security grade: A (80/100) for schneider-electric.lt](https://headertest.com/api/badge/schneider-electric.lt)](https://headertest.com/results/schneider-electric.lt)