Domain History
softtek.lt
Grade A+ · 100/100 · 6/6 security headers present
Security Score
A+
100/ 100
Security Headers
6/ 6
CSP Violations
NoViolations
Issues Found
0Issues
Recommendations
0Available
CSP Analysis
Content Security PolicyHIGH
default-src 'self' 'unsafe-inline' 'unsafe-eval' www2.softtek.com 79620.hs-sites.com stkvideo.softtek.co cdnjs.cloudflare.com vjs.zencdn.net *.softtek.co *.bing.com google.com *.clarity.ms viewlicense.adobe.io *.adobe.io *.adobe.com *.youtube-nocookie.com *.linkedin.oribi.io *.googlesyndication.com *.googletagmanager.com *.adroll.com *.addthis.com id.rlcdn.com *.clickagy.com *.hubspotusercontent-na1.net api.ipstack.com googleads.g.doubleclick.net *.googleadservices.com *.linkedin.com public-rest40.bullhornstaffing.com *.hubapi.com *.hubspotvideo.com web.powerva.microsoft.com *.gstatic.com *.ytimg.com *.vidyard.com softtek.webex.com cdn.jsdelivr.net f.hubspotusercontent30.net *.hubspot.com api.html5media.info perf-.hsforms.com perf.hsforms.com js.hsforms.net js.hs-scripts.com snap.licdn.com *.google-analytics.com s.adroll.com js.hs-analytics.net js.usemessages.com js.hs-banner.com js.hsadspixel.net no-cache.hubspot.com js.hsleadflows.net p.adsymptotic.com cdn2.hubspot.net forms.hubspot.com api.hubapi.com cta-service-cms2.hubspot.com f.hubspotusercontent20.net track.hubspot.com www.googletagmanager.com app.jobcast.net cp.hubspot.com code.jquery.com unpkg.com cdnjs.cloudflare.com *.softtek.com app.hubspot.com px.ads.linkedin.com cdn2.hubspot.net play.vidyard.com static.hsappstatic.net *.hsforms.com hubspot-forms-static-embed.s3.amazonaws.com d.adroll.com documentcloud.adobe.com connect.facebook.net js.hscta.net no-cache.hubspot.com dsum-sec.casalemedia.com pixel.rubiconproject.com pixel.advertising.com sync.outbrain.com simage2.pubmatic.com eb2.3lift.com sync.taboola.com ads.yahoo.com x.bidswitch.net ib.adnxs.com idsync.rlcdn.com us-u.openx.net www.facebook.com viewlicense.adobe.io sync.ipredictive.com sync.ipredictive.com ups.analytics.yahoo.com sync.tidaltv.com img.webmd.com ds.reson8.com cdn.vidyard.com seg.sharethis.com mpp.vindicosuite.com global.ib-ibi.com b1img.com odr.mookie1.com dp-sync.dotomi.com pixel.prfct.co su.addthis.com aorta.clickagy.com www.linkedin.com cm.g.doubleclick.net *.doubleclick.net pippio.com *.youtube.com maxcdn.bootstrapcdn.com rc.rlcdn.com *.googleapis.com segments.company-target.com image.flaticon.com preview.hs-sites.com testnjjhb.com *.google.com *.click2sync.com www.yotube-nocookie.com e.infogram.com subscription.omnithrottle.com player.vimeo.com www2.jobdiva.com image.flaticon.com reprints2.forrester.com *.pubmatic.com *.reson8.com *.office365.com *.zoominfo.com *.google.com.mx js.zi-scripts.com data:; worker-src blob:; media-src 'self' www2.softtek.com *.hubspot.net blob:; base-uri 'none'; object-src 'none';; upgrade-insecure-requests
Directive Analysis
default-srcHIGH
*.hsforms.com data: *.hubspotvideo.com *.google.com js.hs-scripts.com *.softtek.co dp-sync.dotomi.com viewlicense.adobe.io code.jquery.com googleads.g.doubleclick.net *.youtube-nocookie.com *.google-analytics.com mpp.vindicosuite.com seg.sharethis.com *.adobe.io js.hs-banner.com *.googletagmanager.com js.hscta.net 'unsafe-eval' p.adsymptotic.com su.addthis.com perf-.hsforms.com player.vimeo.com web.powerva.microsoft.com pixel.rubiconproject.com sync.taboola.com *.zoominfo.com eb2.3lift.com us-u.openx.net public-rest40.bullhornstaffing.com js.hsadspixel.net api.ipstack.com *.doubleclick.net *.hubspotusercontent-na1.net subscription.omnithrottle.com id.rlcdn.com *.gstatic.com px.ads.linkedin.com cdn.vidyard.com *.pubmatic.com api.html5media.info softtek.webex.com js.usemessages.com no-cache.hubspot.com preview.hs-sites.com rc.rlcdn.com *.reson8.com idsync.rlcdn.com connect.facebook.net *.vidyard.com ups.analytics.yahoo.com vjs.zencdn.net x.bidswitch.net www2.softtek.com js.hsforms.net sync.ipredictive.com *.clarity.ms *.softtek.com *.adobe.com *.linkedin.com *.bing.com *.linkedin.oribi.io *.addthis.com hubspot-forms-static-embed.s3.amazonaws.com f.hubspotusercontent30.net cm.g.doubleclick.net pixel.prfct.co *.ytimg.com ads.yahoo.com sync.tidaltv.com 'unsafe-inline' cdn.jsdelivr.net documentcloud.adobe.com *.googleapis.com stkvideo.softtek.co track.hubspot.com aorta.clickagy.com maxcdn.bootstrapcdn.com app.hubspot.com www.linkedin.com *.googleadservices.com *.office365.com static.hsappstatic.net api.hubapi.com ds.reson8.com global.ib-ibi.com segments.company-target.com pippio.com www.facebook.com s.adroll.com d.adroll.com *.youtube.com image.flaticon.com *.clickagy.com app.jobcast.net perf.hsforms.com odr.mookie1.com www.googletagmanager.com play.vidyard.com img.webmd.com cp.hubspot.com *.hubspot.com b1img.com *.googlesyndication.com *.hubapi.com js.hs-analytics.net *.google.com.mx dsum-sec.casalemedia.com reprints2.forrester.com js.hsleadflows.net unpkg.com js.zi-scripts.com www2.jobdiva.com *.adroll.com snap.licdn.com ib.adnxs.com 79620.hs-sites.com sync.outbrain.com forms.hubspot.com f.hubspotusercontent20.net pixel.advertising.com 'self' cdn2.hubspot.net cta-service-cms2.hubspot.com simage2.pubmatic.com google.com cdnjs.cloudflare.com *.click2sync.com e.infogram.com testnjjhb.com www.yotube-nocookie.com
•Unsafe eval() execution allowed in default-src
•Unsafe inline execution allowed in default-src
•Missing recommended values for default-src: self
worker-srcLOW
blob:
•Missing recommended values for worker-src: none, self
media-srcLOW
blob: www2.softtek.com 'self' *.hubspot.net
•Missing recommended values for media-src: self
base-uriLOW
'none'
•Missing recommended values for base-uri: none, self
object-srcLOW
'none'
•Missing recommended values for object-src: none
upgrade-insecure-requestsLOW
Security Headers
✓Permissions-PolicyPresent
geolocation=()
Restricts which browser features (camera, microphone, geolocation) the page can use, limiting attack surface.
✓Referrer-PolicyPresent
strict-origin-when-cross-origin
Controls how much referrer information is sent with requests, preventing data leaks to third parties.
✓Strict-Transport-SecurityPresent
max-age=31536000; includeSubDomains; preload
Forces browsers to use HTTPS for all future requests, preventing man-in-the-middle attacks and SSL stripping.
✓X-Content-Type-OptionsPresent
nosniff
Prevents browsers from MIME-sniffing responses away from the declared Content-Type, blocking drive-by downloads.
✓X-Frame-OptionsPresent
sameorigin
Prevents the page from being embedded in iframes, protecting against clickjacking attacks.
✓X-XSS-ProtectionPresent
1; mode=block
Legacy XSS filter for older browsers. Modern browsers use CSP instead. Set to "0" to avoid false positives.
Beyond headers: infrastructure exposure
via OSN, our sister projectSecurity headers protect the browser. OSN maps what's exposed underneath — servers, open ports, known CVEs, DNS and WHOIS.
See what the internet sees about softtek.ltWeak headers often come with other exposure — check the full picture.
See full exposure report on OSN →Free, no signup.
softtek.lt
3 scans since 7/17/2025
A+
Latest: 100/100
Total Scans
3
Latest Score
100/100
First Scan
7/17/2025
Last Scan
7/17/2025
Score Trend
Security score progression over 2 scans
Show off your security grade
Embed this badge on your site or README. It updates automatically after each scan and links back to this report.
HTML
<a href="https://headertest.com/results/softtek.lt" title="Security headers grade for softtek.lt — HeaderTest">
<img src="https://headertest.com/api/badge/softtek.lt" alt="HeaderTest security grade: A+ (100/100) for softtek.lt" />
</a>Markdown
[](https://headertest.com/results/softtek.lt)