← All Results
Domain History

siseaudiitor.ee

Grade A+ · 90/100 · 5/6 security headers present

Security Score

A+
90/ 100

Security Headers

5/ 6

CSP Violations

NoViolations

Issues Found

0Issues

Recommendations

0Available

CSP Analysis

Content Security PolicyHIGH
default-src 'self'; block-all-mixed-content ; base-uri 'self'; object-src 'none'; script-src  'nonce-eab06e72da5f4218b433d757fef048e9' 'self' 'unsafe-eval' https://*.onetrust.com https://www.clarity.ms/ https://forms.zoho.eu https://crm.zoho.eu https://maps.googleapis.com https://www.gstatic.com https://www.google.com https://st.getsitecontrol.com/ https://widgets.getsitecontrol.com https://tagmanager.google.com/ https://www.googletagmanager.com/ https://polyfill.io https://optimize.google.com https://www.google-analytics.com https://az416426.vo.msecnd.net https://region1.google-analytics.com/ https://*.googletagmanager.com https://flo.uri.sh/ https://view.ceros.com/; img-src 'self' data: https://*.onetrust.com https://*.analytics.google.com/ https://*.google-analytics.com/ https://px.ads.linkedin.com/ https://p.adsymptotic.com https://px.ads.linkedin.com https://www.facebook.com https://ssl.gstatic.com/ https://syndication.twitter.com https://optimize.google.com https://platform.twitter.com https://pbs.twimg.com https://maps.gstatic.com https://maps.googleapis.com https://www.googletagmanager.com https://i.ytimg.com https://img.youtube.com https://www.google.com https://www.google.ad https://www.google.ae https://www.google.com.af https://www.google.com.ag https://www.google.com.ai https://www.google.al https://www.google.am https://www.google.co.ao https://www.google.com.ar https://www.google.as https://www.google.at https://www.google.com.au https://www.google.az https://www.google.ba https://www.google.com.bd https://www.google.be https://www.google.bf https://www.google.bg https://www.google.com.bh https://www.google.bi https://www.google.bj https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.bs https://www.google.bt https://www.google.co.bw https://www.google.by https://www.google.com.bz https://www.google.ca https://www.google.cd https://www.google.cf https://www.google.cg https://www.google.ch https://www.google.ci https://www.google.co.ck https://www.google.cl https://www.google.cm https://www.google.cn https://www.google.com.co https://www.google.co.cr https://www.google.com.cu https://www.google.cv https://www.google.com.cy https://www.google.cz https://www.google.de https://www.google.dj https://www.google.dk https://www.google.dm https://www.google.com.do https://www.google.dz https://www.google.com.ec https://www.google.ee https://www.google.com.eg https://www.google.es https://www.google.com.et https://www.google.fi https://www.google.com.fj https://www.google.fm https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gg https://www.google.com.gh https://www.google.com.gi https://www.google.gl https://www.google.gm https://www.google.gr https://www.google.com.gt https://www.google.gy https://www.google.com.hk https://www.google.hn https://www.google.hr https://www.google.ht https://www.google.hu https://www.google.co.id https://www.google.ie https://www.google.co.il https://www.google.im https://www.google.co.in https://www.google.iq https://www.google.is https://www.google.it https://www.google.je https://www.google.com.jm https://www.google.jo https://www.google.co.jp https://www.google.co.ke https://www.google.com.kh https://www.google.ki https://www.google.kg https://www.google.co.kr https://www.google.com.kw https://www.google.kz https://www.google.la https://www.google.com.lb https://www.google.li https://www.google.lk https://www.google.co.ls https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.com.ly https://www.google.co.ma https://www.google.md https://www.google.me https://www.google.mg https://www.google.mk https://www.google.ml https://www.google.com.mm https://www.google.mn https://www.google.ms https://www.google.com.mt https://www.google.mu https://www.google.mv https://www.google.mw https://www.google.com.mx https://www.google.com.my https://www.google.co.mz https://www.google.com.na https://www.google.com.ng https://www.google.com.ni https://www.google.ne https://www.google.nl https://www.google.no https://www.google.com.np https://www.google.nr https://www.google.nu https://www.google.co.nz https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.pg https://www.google.com.ph https://www.google.com.pk https://www.google.pl https://www.google.pn https://www.google.com.pr https://www.google.ps https://www.google.pt https://www.google.com.py https://www.google.com.qa https://www.google.ro https://www.google.ru https://www.google.rw https://www.google.com.sa https://www.google.com.sb https://www.google.sc https://www.google.se https://www.google.com.sg https://www.google.sh https://www.google.si https://www.google.sk https://www.google.com.sl https://www.google.sn https://www.google.so https://www.google.sm https://www.google.sr https://www.google.st https://www.google.com.sv https://www.google.td https://www.google.tg https://www.google.co.th https://www.google.com.tj https://www.google.tl https://www.google.tm https://www.google.tn https://www.google.to https://www.google.com.tr https://www.google.tt https://www.google.com.tw https://www.google.co.tz https://www.google.com.ua https://www.google.co.ug https://www.google.co.uk https://www.google.com.uy https://www.google.co.uz https://www.google.com.vc https://www.google.co.ve https://www.google.vg https://www.google.co.vi https://www.google.com.vn https://www.google.vu https://www.google.ws https://www.google.rs https://www.google.co.za https://www.google.co.zm https://www.google.co.zw https://www.google.cat https://d3nqfz2gm66yqg.cloudfront.net/ https://fwrdcrm.com/ https://cms.pipedriveassets.com/ https://www.scoro.com/ https://c.clarity.ms/ https://c.bing.com/ https://*.googletagmanager.com; style-src 'self' 'unsafe-inline' https://tagmanager.google.com/ https://fonts.googleapis.com/ https://optimize.google.com https://platform.twitter.com https://cdnjs.cloudflare.com https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; frame-src https://www.facebook.com https://www.google.com/ https://platform.twitter.com https://www.youtube.com https://optimize.google.com https://w.soundcloud.com https://player.vimeo.com https://www.gstatic.com https://cdn.optimizely.com https://forms.zohopublic.eu/ https://survey.zohopublic.eu/ https://flo.uri.sh/ https://view.ceros.com/; connect-src 'self' https://*.onetrust.com https://www.google.com https://analytics.google.com https://*.doubleclick.net https://*.googlesyndication.com https://px.ads.linkedin.com https://maps.googleapis.com/ https://www.facebook.com/ https://extreme-ip-lookup.com https://stats.g.doubleclick.net https://dc.services.visualstudio.com https://az416426.vo.msecnd.net https://www.clarity.ms/ https://*.analytics.google.com/ https://*.google-analytics.com/ https://analytics.google.com/ https://*.googletagmanager.com https://a.clarity.ms https://b.clarity.ms https://c.clarity.ms https://d.clarity.ms https://e.clarity.ms https://f.clarity.ms https://g.clarity.ms https://h.clarity.ms https://i.clarity.ms https://j.clarity.ms https://k.clarity.ms https://l.clarity.ms https://m.clarity.ms https://n.clarity.ms https://o.clarity.ms https://p.clarity.ms https://q.clarity.ms https://r.clarity.ms https://s.clarity.ms https://t.clarity.ms https://u.clarity.ms https://v.clarity.ms https://w.clarity.ms https://x.clarity.ms https://y.clarity.ms https://z.clarity.ms;
Directive Analysis
default-srcLOW
'self'
•Missing recommended values for default-src: self
block-all-mixed-contentLOW
base-uriLOW
'self'
•Missing recommended values for base-uri: none, self
object-srcLOW
'none'
•Missing recommended values for object-src: none
script-srcHIGH
https://*.onetrust.com https://st.getsitecontrol.com/ https://optimize.google.com 'unsafe-eval' https://maps.googleapis.com https://region1.google-analytics.com/ https://tagmanager.google.com/ https://forms.zoho.eu 'nonce-eab06e72da5f4218b433d757fef048e9' https://polyfill.io https://view.ceros.com/ 'self' https://www.google-analytics.com https://az416426.vo.msecnd.net https://widgets.getsitecontrol.com https://www.googletagmanager.com/ https://flo.uri.sh/ https://www.clarity.ms/ https://*.googletagmanager.com https://www.google.com https://crm.zoho.eu https://www.gstatic.com
•Unsafe eval() execution allowed in script-src
•Missing recommended values for script-src: sha384-, nonce-, sha256-, sha512-, self
•No nonces or hashes used for script-src
img-srcLOW
https://www.google.com.br https://www.google.hr https://www.google.vg https://www.google.com.bd https://www.google.dz https://www.googletagmanager.com https://www.google.com.cy https://www.google.com.cu https://www.google.so https://www.google.com.om https://www.google.no https://www.google.com.bn https://www.google.com.pe https://www.google.co.uz https://www.google.ge https://www.google.me https://www.google.ml https://www.google.nu https://www.google.vu https://www.google.lk https://www.google.mn https://www.google.com.ec https://www.google.hn https://www.google.com.jm https://www.google.ne https://www.google.al https://www.google.co.in https://www.google.co.ke https://www.scoro.com/ https://www.google.at https://www.google.cf https://www.google.co.zw https://www.google.bj https://www.google.lt https://p.adsymptotic.com https://www.google.tt https://www.google.ga https://www.google.com.ar https://www.google.nr https://www.google.com.sl https://www.google.ca https://www.google.com.hk https://www.google.com.au https://www.google.com.ly https://img.youtube.com https://www.google.cz https://www.google.co.cr https://www.google.sn https://www.google.co.bw https://www.google.sm https://www.google.mk https://www.google.com.tr https://platform.twitter.com https://www.google.gm https://www.google.kg https://www.google.co.ck https://www.google.co.uk https://www.google.mv https://www.google.com.af https://www.google.ms https://www.google.ro https://www.google.com.do https://www.google.fm https://www.google.co.il https://www.google.by https://www.google.ae https://www.google.az https://www.google.dk https://www.google.com.sg https://www.google.com.tj https://i.ytimg.com https://www.google.com.pk https://www.google.co.tz https://www.google.lv https://www.google.com.bo https://www.google.co.za https://www.google.mw https://fwrdcrm.com/ https://www.google.sh https://www.google.com.ai https://www.google.com.co https://www.google.com.eg https://www.google.co.mz https://www.google.kz https://www.google.bt https://www.google.fr https://www.google.gr https://www.google.as https://www.google.com.et https://www.google.cl https://www.google.com.fj https://www.google.sk https://www.google.com.bh https://syndication.twitter.com https://www.google.co.kr https://www.google.ru https://www.google.com.mt https://www.google.cn https://www.google.pt data: https://www.google.com.tw https://*.onetrust.com https://www.google.bf https://www.facebook.com https://www.google.sr https://www.google.je https://maps.googleapis.com https://www.google.is https://www.google.rw https://www.google.co.id https://px.ads.linkedin.com/ https://d3nqfz2gm66yqg.cloudfront.net/ https://www.google.td https://www.google.com.ua https://www.google.com.gi https://www.google.it https://www.google.com.sv https://www.google.co.ve https://*.google-analytics.com/ https://www.google.bs https://www.google.cd https://www.google.jo https://www.google.pl https://www.google.com.pr https://www.google.com.py https://c.bing.com/ https://www.google.com.pa https://www.google.sc https://www.google.com.qa https://px.ads.linkedin.com https://www.google.com.na https://www.google.ci https://www.google.com.lb https://www.google.co.ao https://www.google.tl https://www.google.cm https://pbs.twimg.com 'self' https://www.google.co.ls https://www.google.md https://www.google.com.ni https://*.analytics.google.com/ https://ssl.gstatic.com/ https://www.google.gg https://www.google.cv https://www.google.rs https://www.google.com.sb https://www.google.com.ag https://www.google.co.vi https://www.google.li https://www.google.be https://www.google.com.mm https://www.google.dj https://www.google.co.ma https://www.google.cg https://www.google.pn https://www.google.com.bz https://www.google.ad https://www.google.ba https://www.google.tm https://www.google.es https://www.google.gl https://www.google.si https://www.google.am https://www.google.com.pg https://www.google.tg https://www.google.iq https://www.google.com.sa https://optimize.google.com https://www.google.im https://www.google.co.ug https://www.google.ch https://www.google.ht https://www.google.co.th https://www.google.com.kh https://www.google.nl https://www.google.de https://www.google.com.ng https://www.google.hu https://www.google.mu https://www.google.ki https://www.google.tn https://www.google.dm https://maps.gstatic.com https://www.google.la https://www.google.bg https://cms.pipedriveassets.com/ https://c.clarity.ms/ https://www.google.se https://www.google.com.gh https://www.google.gy https://www.google.ws https://www.google.ee https://www.google.co.zm https://www.google.com.mx https://www.google.ie https://www.google.co.nz https://www.google.com.vc https://www.google.com.vn https://www.google.com.gt https://www.google.bi https://www.google.ps https://www.google.com.kw https://www.google.fi https://www.google.lu https://*.googletagmanager.com https://www.google.mg https://www.google.com https://www.google.com.np https://www.google.st https://www.google.to https://www.google.cat https://www.google.com.uy https://www.google.com.ph https://www.google.com.my https://www.google.co.jp
•Missing recommended values for img-src: self
style-srcHIGH
'unsafe-inline' https://fonts.googleapis.com/ https://cdnjs.cloudflare.com https://optimize.google.com https://platform.twitter.com https://fonts.googleapis.com https://tagmanager.google.com/ 'self'
•Unsafe inline execution allowed in style-src
•Missing recommended values for style-src: sha384-, nonce-, sha256-, sha512-, self
font-srcLOW
data: https://fonts.gstatic.com 'self'
•Missing recommended values for font-src: self
frame-srcLOW
https://w.soundcloud.com https://www.youtube.com https://survey.zohopublic.eu/ https://platform.twitter.com https://www.facebook.com https://optimize.google.com https://player.vimeo.com https://www.google.com/ https://www.gstatic.com https://cdn.optimizely.com https://forms.zohopublic.eu/ https://view.ceros.com/ https://flo.uri.sh/
•Missing recommended values for frame-src: self
connect-srcLOW
https://*.onetrust.com https://*.doubleclick.net https://j.clarity.ms https://maps.googleapis.com/ https://h.clarity.ms https://s.clarity.ms https://x.clarity.ms https://b.clarity.ms https://*.google-analytics.com/ https://analytics.google.com/ https://f.clarity.ms https://px.ads.linkedin.com https://a.clarity.ms https://o.clarity.ms https://i.clarity.ms https://p.clarity.ms https://n.clarity.ms https://d.clarity.ms https://l.clarity.ms 'self' https://w.clarity.ms https://v.clarity.ms https://*.analytics.google.com/ https://r.clarity.ms https://q.clarity.ms https://g.clarity.ms https://az416426.vo.msecnd.net https://c.clarity.ms https://extreme-ip-lookup.com https://t.clarity.ms https://dc.services.visualstudio.com https://z.clarity.ms https://*.googlesyndication.com https://k.clarity.ms https://stats.g.doubleclick.net https://www.clarity.ms/ https://u.clarity.ms https://*.googletagmanager.com https://www.google.com https://m.clarity.ms https://y.clarity.ms https://analytics.google.com https://www.facebook.com/ https://e.clarity.ms
•Missing recommended values for connect-src: self

Security Headers

✓Permissions-PolicyPresent

accelerometer=(), camera=(), geolocation=(self), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()

Restricts which browser features (camera, microphone, geolocation) the page can use, limiting attack surface.

✗Referrer-PolicyMissing

Controls how much referrer information is sent with requests, preventing data leaks to third parties.

How to add it:

nginx
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
apache
Header always set Referrer-Policy "strict-origin-when-cross-origin"
cloudflare
Rules > Transform Rules > HTTP Response Header Modification > Set Referrer-Policy to "strict-origin-when-cross-origin"
✓Strict-Transport-SecurityPresent

max-age=31536000; includeSubDomains

Forces browsers to use HTTPS for all future requests, preventing man-in-the-middle attacks and SSL stripping.

✓X-Content-Type-OptionsPresent

nosniff

Prevents browsers from MIME-sniffing responses away from the declared Content-Type, blocking drive-by downloads.

✓X-Frame-OptionsPresent

SAMEORIGIN

Prevents the page from being embedded in iframes, protecting against clickjacking attacks.

✓X-XSS-ProtectionPresent

1; mode=block

Legacy XSS filter for older browsers. Modern browsers use CSP instead. Set to "0" to avoid false positives.

1 recommended security header is missing on siseaudiitor.ee.

Beyond headers: infrastructure exposure

via OSN, our sister project

Security headers protect the browser. OSN maps what's exposed underneath — servers, open ports, known CVEs, DNS and WHOIS.

See what the internet sees about siseaudiitor.eeWeak headers often come with other exposure — check the full picture.

siseaudiitor.ee

3 scans since 7/19/2025

A+

Latest: 90/100

Total Scans

3

Latest Score

90/100

First Scan

7/19/2025

Last Scan

7/19/2025

Score Trend

Security score progression over 2 scans

Scan History

DateScoreCSPHeadersIssuesAction
Jul 19, 2025
A+ (90)
No
5/60View →
Jul 19, 2025
A+ (90)
No
5/60View →

Show off your security grade

Embed this badge on your site or README. It updates automatically after each scan and links back to this report.

HeaderTest security grade: A+ (90/100) for siseaudiitor.ee
HTML
<a href="https://headertest.com/results/siseaudiitor.ee" title="Security headers grade for siseaudiitor.ee — HeaderTest">
  <img src="https://headertest.com/api/badge/siseaudiitor.ee" alt="HeaderTest security grade: A+ (90/100) for siseaudiitor.ee" />
</a>
Markdown
[![HeaderTest security grade: A+ (90/100) for siseaudiitor.ee](https://headertest.com/api/badge/siseaudiitor.ee)](https://headertest.com/results/siseaudiitor.ee)