← All Results
Domain History

swecon.lv

Grade B · 70/100 · 3/6 security headers present

Security Score

B
70/ 100

Security Headers

3/ 6

CSP Violations

NoViolations

Issues Found

0Issues

Recommendations

0Available

CSP Analysis

Content Security PolicyHIGH
child-src 'self' https://cdn-ukwest.onetrust.com/ https://*.hs-sites.com/ https://*.kundo.se/ https://*.scratcher.io/ https://*.snapchat.com/ https://12640402.fls.doubleclick.net/ https://13014958.fls.doubleclick.net https://9757970.fls.doubleclick.net/ https://a19335231756.cdn.optimizely.com/ https://agrol.lubricantadvisor.com https://app-eu1.hubspot.com/ https://apps.mypurecloud.com/ https://apps.mypurecloud.de/ https://cdn.jobylon.com https://chatwidget-prod.web.app https://dashboard.find.episerver.net/ https://dreambroker.com/ https://embed.acast.com/ https://finvaasanc25.azurewebsites.net/ https://form.apsis.one/ https://forms-eu1.hsforms.com/ https://forms.hsforms.com/ https://odla-herbicide.azurewebsites.net/ https://odla-mixture.azurewebsites.net/ https://open.spotify.com/ https://padlet.com/ https://player.vimeo.com/ https://press.lantmannen.com/ https://sst.pastridor.com https://sst.pastridor.com/ https://staspeneducationde.z6.web.core.windows.net/ https://staspeneducationdk.z6.web.core.windows.net/ https://staspeneducationfi.z6.web.core.windows.net/ https://staspeneducationfr.z6.web.core.windows.net/ https://staspeneducationit.z6.web.core.windows.net/ https://staspeneducationnl.z6.web.core.windows.net/ https://staspeneducationno.z6.web.core.windows.net/ https://staspeneducationse.z6.web.core.windows.net/ https://staspeneducationuk.z6.web.core.windows.net/ https://staspeneducationus.z6.web.core.windows.net/ https://statistics-dashboard.azurewebsites.net/ https://stgagroltips.z6.web.core.windows.net/ https://td.doubleclick.net/ https://test-agrol.lubricantadvisor.com/ https://viewer.ipaper.io/ https://vimeo.com/ https://www.google.com/ https://www.googletagmanager.com/ https://www.lantmannenlantbrukmaskin.se https://www.youtube.com/ https://js.hsforms.net/forms/embed/v2.js;, script-src 'self' 'unsafe-inline' https://*.lantmannen.com/ https://*.scratcher.io/ https://api.mypurecloud.de/api/v2/webchat/guest/conversations https://cdn-ukwest.onetrust.com/ https://cdnjs.cloudflare.com/ https://popper.js.org/ 'unsafe-eval' *.rekai.se https://*.hotjar.com/ https://*.kundo.se/ https://*.snapchat.com/ https://ajax.googleapis.com/ajax/libs/angularjs/1.6.4/angular.min.js https://ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js https://apps.mypurecloud.de/ https://apps.mypurecloud.de/widgets/9.0/plugins/widgets-core.min.js https://bat.bing.com https://bat.bing.com/bat.js https://bat.bing.net https://brand-incl.lantmannen.com https://cdn.jobylon.com https://cdn.jsdelivr.net/npm/@splidejs/[email protected]/dist/js/splide.min.js https://cdn.jsdelivr.net/npm/[email protected]/dist/js/ https://cdn.rawgit.com/twbs/bootstrap/v3.3.7/js/affix.js https://chatwidget-prod.web.app https://code.jquery.com https://connect.facebook.net/ https://fonts.googleapis.com/ https://googleads.g.doubleclick.net/pagead/viewthroughconversion/ https://js-eu1.hs-analytics.net/ https://js-eu1.hs-banner.com/ https://js-eu1.hs-scripts.com/ https://js-eu1.hsadspixel.net/ https://js-eu1.hsforms.net/ https://js-eu1.hsleadflows.net/ https://js-eu1.hubspot.com/ https://js-eu1.usemessages.com/ https://js-na1.hs-scripts.com/ https://js.hs-analytics.net/analytics/ https://js.hs-banner.com/ https://js.hs-scripts.com/2714594.js https://js.hsadspixel.net/fb.js https://js.hsforms.net/ https://js.hsforms.net/forms/embed/v2.js https://js.hsleadflows.net/leadflows.js https://js.hubspot.com/web-interactives-embed.js https://js.monitor.azure.com https://js.usemessages.com/conversations-embed.js https://maps.googleapis.com/ https://matomo.azurewebsites.net https://netdna.bootstrapcdn.com/bootstrap/3.1.1/js/bootstrap.min.js https://player.vimeo.com/api/player.js https://sc-static.net/scevent.min.js https://secure.24-astute.com/ https://secure.smart-business-foresight.com https://sibautomation.com/ https://sleeknotecustomerscripts.sleeknote.com https://sleeknotestaticcontent.sleeknote.com https://snap.licdn.com/li.lms-analytics/insight.min.js https://snap.licdn.com/li.lms-analytics/insight.old.min.js https://static-eu.jobylon.com/js/embedder.min.464344928aad.js https://translate-pa.googleapis.com/ https://translate.google.com/ https://translate.googleapis.com/ https://unpkg.com/ https://use.fontawesome.com/ https://web-sdk-eu.aptrinsic.com https://www.clarity.ms/ https://www.google-analytics.com/analytics.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.googleadservices.com/ https://www.googletagmanager.com/ https://www.gstatic.com/ https://www.lantmannenunibake.com/ https://www.youtube.com/ https://*.clarity.ms https://cdn.rawgit.com https://connect.facebook.net https://sst.pastridor.com https://sst.pastridor.com/ https://static-chat.kundo.se/ https://static.hotjar.com/ https://translate.google.com https://unpkg.com https://use.fontawesome.com https://www.google-analytics.com https://www.googletagmanager.com https://www.pastridor.com/;, style-src 'self' 'unsafe-inline' https://*.lantmannen.com/ https://cdn-ukwest.onetrust.com/ https://cdn.jsdelivr.net/npm/@splidejs/[email protected]/dist/css/splide.min.css https://cdnjs.cloudflare.com/ https://sleeknotestaticcontent.sleeknote.com blob: data: https://*.kundo.se/ https://apps.mypurecloud.com/ https://brand-incl.lantmannen.com https://cdn.jsdelivr.net https://cdn.jsdelivr.net/npm/[email protected]/font/bootstrap-icons.css https://cdn.jsdelivr.net/npm/[email protected]/font/bootstrap-icons.css https://cdnjs.cloudflare.com https://chat.kundo.se https://chat.kundo.se/ https://fast.fonts.net https://fonts.googleapis.com https://fonts.googleapis.com/ https://hello.myfonts.net https://netdna.bootstrapcdn.com/bootstrap/3.1.1/css/bootstrap.min.css https://static-chat.kundo.se/ https://unpkg.com https://unpkg.com/ https://unpkg.com/swiper@8/swiper-bundle.min.css https://use.fontawesome.com https://use.fontawesome.com/ https://web-sdk-eu.aptrinsic.com/ https://www.gstatic.com/;, connect-src 'self' data: *.rekai.se https://*.clarity.ms https://*.hubspot.com/ https://*.kundo.se/ https://*.lantmannen.com/ https://*.snapchat.com/ https://ad.doubleclick.net https://adservice.google.com https://adservice.google.com/ https://analytics.sleeknote.com/ https://api-cdn.mypurecloud.de/webdeployments/ https://api-eu1.hubapi.com/ https://api.hubapi.com/ https://api.ipify.org/ https://api.mypurecloud.de/ https://api.mypurecloud.de/api/v2/webchat/guest/conversations https://apps.mypurecloud.com/ https://bat.bing.com https://bat.bing.com/bat.js https://bat.bing.net https://cdn-ukwest.onetrust.com/ https://content.hotjar.io/ https://cta-service-cms2.hubspot.com/ https://dc.services.visualstudio.com https://esp-eu.aptrinsic.com/ https://esp-eu.aptrinsic.com/rte/v1/ https://f.clarity.ms/collect https://fonts.googleapis.com https://forms-eu1.hsforms.com/ https://forms.hsforms.com/ https://forms.hsforms.com/embed/v3/ https://forms.hubspot.com/ https://geolocation.onetrust.com https://google.com/ https://googleads.g.doubleclick.net/pagead/ https://hubspot-forms-static-embed.s3.amazonaws.com/ https://integrationssite.sleeknote.com/ https://logx.optimizely.com/ https://maps.googleapis.com/ https://matomo.azurewebsites.net https://metrics.hotjar.io/ https://odla-api-dev.azurewebsites.net/ https://pagead2.googlesyndication.com https://privacyportal-uk.onetrust.com https://px.ads.linkedin.com https://px.ads.linkedin.com/wa/ https://px4.ads.linkedin.com https://region1.analytics.google.com https://region1.google-analytics.com https://sleeknotestaticcontent.sleeknote.com https://sst.pastridor.com/ https://stats.g.doubleclick.net/ https://translate.googleapis.com/ https://unpkg.com https://unpkg.com/ https://unpkg.com/swiper@8/swiper-bundle.min.css https://www.facebook.com/ https://www.google-analytics.com https://www.google.com/ https://www.google.com/pagead/ https://www.google.fi https://www.google.no https://www.pastridor.com/ wss://streaming.mypurecloud.de wss://webmessaging.mypurecloud.de/ wss://ws.hotjar.com/api/; font-src 'self' data: https://*.cloudfront.net/graphik/ https://*.cloudfront.net/lato/ https://*.lantmannen.com/ https://apps.mypurecloud.com/ https://brand-incl.lantmannen.com https://cdn-ukwest.onetrust.com/ https://cdn.jsdelivr.net/npm/[email protected]/font/bootstrap-icons.css https://cdn.jsdelivr.net/npm/[email protected]/font/fonts/ https://cdn.jsdelivr.net/npm/[email protected]/font/bootstrap-icons.css https://cdn.jsdelivr.net/npm/[email protected]/font/fonts/ https://cdnjs.cloudflare.com/ https://fonts.gstatic.com/ https://sleeknotestaticcontent.sleeknote.com https://use.fontawesome.com/; img-src 'self' blob: data: https://*.clarity.ms https://*.lantmannen.com/ https://2714594.fs1.hubspotusercontent-na1.net/ https://ad.doubleclick.net/ https://adservice.google.com https://adservice.google.com/ https://analytics.sleeknote.com https://api.taggrs.io https://bat.bing.com https://bat.bing.com/bat.js https://bat.bing.net https://brand-incl.lantmannen.com https://c.bing.com https://c.clarity.ms/c.gif https://cdn-ukwest.onetrust.com/ https://chatwidget-prod.web.app https://cta-service-cms2.hubspot.com/ https://firebasestorage.googleapis.com/ https://fonts.gstatic.com/ https://forms-eu1.hsforms.com/ https://forms-na1.hsforms.com/embed/v3/ https://forms.hsforms.com/embed/v3/ https://googleads.g.doubleclick.net/pagead/ https://googleads.g.doubleclick.net/pagead/viewthroughconversion/ https://i.ytimg.com https://img.youtube.com/ https://maps.googleapis.com/ https://maps.gstatic.com/mapfiles/ https://mapsresources-pa.googleapis.com/ https://mb.cision.com/ https://mnd-assets.mynewsdesk.com/ https://pagead2.googlesyndication.com https://perf-eu1.hsforms.com/ https://perf-na1.hsforms.com/embed/v3/counters.gif https://px.ads.linkedin.com https://px.ads.linkedin.com/ https://px4.ads.linkedin.com https://region1.analytics.google.com https://resources.mynewsdesk.com/ https://sleeknotestaticcontent.sleeknote.com https://sst.pastridor.com/ https://static.hsappstatic.net/ https://static.hubspot.com/ https://stats.g.doubleclick.net/ https://track-eu1.hubspot.com/ https://track.hubspot.com/ https://vumbnail.com https://www.facebook.com/ https://www.google-analytics.com/ https://www.google.be https://www.google.co.in https://www.google.com/ads/ https://www.google.com/pagead/ https://www.google.de https://www.google.dk/ https://www.google.es https://www.google.fi https://www.google.lt https://www.google.nl https://www.google.no https://www.google.pl https://www.google.ro https://www.google.se/ads/ https://www.google.se/pagead/ https://www.googletagmanager.com/ https://www.gstatic.com/ https://www.lantmannen.com https://www.lantmannen.se/ https://www.lantmannenbiorefineries.se https://www.lantmannencerealia.com https://www.lantmannenlantbrukmaskin.se https://www.lantmannenunibake.dk https://www.linkedin.com/ https://www.odla.lantmannenlantbruk.se https://www.pastridor.com/ https://www.schulstadbakerysolutions.dk; manifest-src 'self' https://cdn-ukwest.onetrust.com/ https://www.kraffthastfoder.se; media-src 'self' https://cdn-ukwest.onetrust.com/; object-src 'self' https://cdn-ukwest.onetrust.com/;, form-action 'self' https://cdn-ukwest.onetrust.com/ https://forms-eu1.hsforms.com/ https://forms.hsforms.com/ https://odla-api-dev.azurewebsites.net/; frame-ancestors 'self' https://cdn-ukwest.onetrust.com/ https://sst.pastridor.com https://www.lantmannencerealia.no; base-uri https://cdn-ukwest.onetrust.com/ https://www.lantmannencerealia.fi/ https://www.schulstadbakerysolutions.de https://www.startgranola.fi/;
Directive Analysis
child-srcLOW
https://sst.pastridor.com/ https://sst.pastridor.com https://open.spotify.com/ https://odla-herbicide.azurewebsites.net/ https://press.lantmannen.com/ https://td.doubleclick.net/ https://staspeneducationde.z6.web.core.windows.net/ https://13014958.fls.doubleclick.net https://agrol.lubricantadvisor.com https://player.vimeo.com/ https://staspeneducationdk.z6.web.core.windows.net/ https://staspeneducationse.z6.web.core.windows.net/ https://12640402.fls.doubleclick.net/ https://odla-mixture.azurewebsites.net/ https://*.scratcher.io/ https://*.hs-sites.com/ https://www.googletagmanager.com/ https://test-agrol.lubricantadvisor.com/ https://*.kundo.se/ https://www.youtube.com/ https://staspeneducationuk.z6.web.core.windows.net/ https://stgagroltips.z6.web.core.windows.net/ https://form.apsis.one/ https://www.lantmannenlantbrukmaskin.se https://forms-eu1.hsforms.com/ https://finvaasanc25.azurewebsites.net/ https://staspeneducationnl.z6.web.core.windows.net/ https://cdn.jobylon.com https://a19335231756.cdn.optimizely.com/ https://staspeneducationit.z6.web.core.windows.net/ https://app-eu1.hubspot.com/ https://staspeneducationus.z6.web.core.windows.net/ https://dreambroker.com/ https://apps.mypurecloud.com/ https://apps.mypurecloud.de/ https://9757970.fls.doubleclick.net/ https://embed.acast.com/ https://staspeneducationfi.z6.web.core.windows.net/ https://cdn-ukwest.onetrust.com/ https://vimeo.com/ https://statistics-dashboard.azurewebsites.net/ https://*.snapchat.com/ https://chatwidget-prod.web.app https://staspeneducationfr.z6.web.core.windows.net/ https://padlet.com/ https://www.google.com/ https://forms.hsforms.com/ 'self' https://dashboard.find.episerver.net/ https://js.hsforms.net/forms/embed/v2.js https://viewer.ipaper.io/ https://staspeneducationno.z6.web.core.windows.net/
•Unknown directive: child-src
,HIGH
https://js.hs-scripts.com/2714594.js https://ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js https://js-eu1.hsforms.net/ https://code.jquery.com https://connect.facebook.net https://js-eu1.usemessages.com/ https://www.gstatic.com/ https://sc-static.net/scevent.min.js https://translate.googleapis.com/ https://bat.bing.net https://js-eu1.hsleadflows.net/ https://sleeknotecustomerscripts.sleeknote.com https://bat.bing.com https://static-chat.kundo.se/ https://translate.google.com https://js-na1.hs-scripts.com/ https://www.google-analytics.com https://fonts.googleapis.com/ https://js.hsforms.net/ https://player.vimeo.com/api/player.js https://sst.pastridor.com https://translate.google.com/ https://use.fontawesome.com/ https://www.googleadservices.com/ https://www.pastridor.com/ https://js.monitor.azure.com https://js-eu1.hs-scripts.com/ https://js.hs-banner.com/ https://static.hotjar.com/ https://js-eu1.hubspot.com/ https://*.lantmannen.com/ https://bat.bing.com/bat.js https://unpkg.com https://apps.mypurecloud.de/ https://js-eu1.hs-analytics.net/ https://unpkg.com/ https://cdn.rawgit.com https://js.hsadspixel.net/fb.js https://popper.js.org/ https://js.hs-analytics.net/analytics/ https://apps.mypurecloud.de/widgets/9.0/plugins/widgets-core.min.js https://secure.smart-business-foresight.com https://www.lantmannenunibake.com/ https://web-sdk-eu.aptrinsic.com https://cdn.jsdelivr.net/npm/@splidejs/[email protected]/dist/js/splide.min.js https://www.googletagmanager.com/ https://snap.licdn.com/li.lms-analytics/insight.min.js https://connect.facebook.net/ 'unsafe-eval' https://www.google.com/recaptcha/enterprise.js https://www.googletagmanager.com https://cdnjs.cloudflare.com/ https://*.hotjar.com/ https://js-eu1.hs-banner.com/ https://maps.googleapis.com/ https://cdn.jobylon.com https://www.google-analytics.com/analytics.js https://secure.24-astute.com/ https://js-eu1.hsadspixel.net/ 'unsafe-inline' https://cdn.rawgit.com/twbs/bootstrap/v3.3.7/js/affix.js https://translate-pa.googleapis.com/ https://api.mypurecloud.de/api/v2/webchat/guest/conversations https://cdn.jsdelivr.net/npm/[email protected]/dist/js/ https://sst.pastridor.com/ https://www.google.com/recaptcha/api.js script-src https://js.hubspot.com/web-interactives-embed.js https://matomo.azurewebsites.net https://static-eu.jobylon.com/js/embedder.min.464344928aad.js https://www.clarity.ms/ https://sleeknotestaticcontent.sleeknote.com https://*.scratcher.io/ https://js.usemessages.com/conversations-embed.js https://*.kundo.se/ https://snap.licdn.com/li.lms-analytics/insight.old.min.js https://www.youtube.com/ https://js.hsleadflows.net/leadflows.js https://*.clarity.ms https://ajax.googleapis.com/ajax/libs/angularjs/1.6.4/angular.min.js *.rekai.se https://googleads.g.doubleclick.net/pagead/viewthroughconversion/ https://netdna.bootstrapcdn.com/bootstrap/3.1.1/js/bootstrap.min.js https://cdn-ukwest.onetrust.com/ https://brand-incl.lantmannen.com https://*.snapchat.com/ https://chatwidget-prod.web.app 'self' https://sibautomation.com/ https://js.hsforms.net/forms/embed/v2.js https://use.fontawesome.com
•Unknown directive: ,
•Unsafe eval() execution allowed in ,
•Unsafe inline execution allowed in ,
,HIGH
https://fonts.googleapis.com/ https://cdn.jsdelivr.net/npm/@splidejs/[email protected]/dist/css/splide.min.css blob: https://web-sdk-eu.aptrinsic.com/ https://cdnjs.cloudflare.com https://sleeknotestaticcontent.sleeknote.com https://use.fontawesome.com/ https://cdn.jsdelivr.net https://chat.kundo.se/ https://www.gstatic.com/ https://*.kundo.se/ https://cdnjs.cloudflare.com/ https://fonts.googleapis.com https://static-chat.kundo.se/ https://chat.kundo.se https://netdna.bootstrapcdn.com/bootstrap/3.1.1/css/bootstrap.min.css https://unpkg.com/swiper@8/swiper-bundle.min.css https://hello.myfonts.net https://*.lantmannen.com/ https://apps.mypurecloud.com/ https://unpkg.com https://unpkg.com/ 'unsafe-inline' https://cdn.jsdelivr.net/npm/[email protected]/font/bootstrap-icons.css https://cdn-ukwest.onetrust.com/ https://cdn.jsdelivr.net/npm/[email protected]/font/bootstrap-icons.css https://brand-incl.lantmannen.com style-src 'self' data: https://fast.fonts.net https://use.fontawesome.com
•Unknown directive: ,
•Unsafe inline execution allowed in ,
,LOW
https://api.ipify.org/ https://region1.analytics.google.com https://sst.pastridor.com/ https://region1.google-analytics.com https://dc.services.visualstudio.com https://matomo.azurewebsites.net https://logx.optimizely.com/ https://api-eu1.hubapi.com/ https://google.com/ https://api.hubapi.com/ https://esp-eu.aptrinsic.com/rte/v1/ https://forms.hubspot.com/ https://f.clarity.ms/collect https://sleeknotestaticcontent.sleeknote.com https://www.google.no https://stats.g.doubleclick.net/ wss://webmessaging.mypurecloud.de/ https://integrationssite.sleeknote.com/ https://api.mypurecloud.de/ https://odla-api-dev.azurewebsites.net/ https://*.hubspot.com/ https://*.kundo.se/ https://www.pastridor.com/ https://translate.googleapis.com/ https://bat.bing.net https://fonts.googleapis.com https://bat.bing.com https://www.facebook.com/ https://metrics.hotjar.io/ https://www.google-analytics.com https://api-cdn.mypurecloud.de/webdeployments/ https://maps.googleapis.com/ https://www.google.com/pagead/ https://*.clarity.ms https://forms-eu1.hsforms.com/ https://unpkg.com/swiper@8/swiper-bundle.min.css https://px4.ads.linkedin.com https://px.ads.linkedin.com/wa/ wss://streaming.mypurecloud.de https://adservice.google.com https://adservice.google.com/ wss://ws.hotjar.com/api/ *.rekai.se https://*.lantmannen.com/ connect-src https://esp-eu.aptrinsic.com/ https://bat.bing.com/bat.js https://apps.mypurecloud.com/ https://px.ads.linkedin.com https://unpkg.com https://googleads.g.doubleclick.net/pagead/ https://forms.hsforms.com/embed/v3/ https://unpkg.com/ https://geolocation.onetrust.com https://analytics.sleeknote.com/ https://pagead2.googlesyndication.com https://privacyportal-uk.onetrust.com https://ad.doubleclick.net https://cdn-ukwest.onetrust.com/ https://cta-service-cms2.hubspot.com/ https://www.google.fi https://*.snapchat.com/ https://content.hotjar.io/ https://hubspot-forms-static-embed.s3.amazonaws.com/ https://www.google.com/ https://forms.hsforms.com/ 'self' data: https://api.mypurecloud.de/api/v2/webchat/guest/conversations
•Unknown directive: ,
font-srcLOW
https://*.cloudfront.net/lato/ https://cdn.jsdelivr.net/npm/[email protected]/font/bootstrap-icons.css https://use.fontawesome.com/ https://cdn-ukwest.onetrust.com/ https://cdn.jsdelivr.net/npm/[email protected]/font/bootstrap-icons.css https://brand-incl.lantmannen.com https://*.cloudfront.net/graphik/ https://*.lantmannen.com/ https://cdnjs.cloudflare.com/ 'self' data: https://cdn.jsdelivr.net/npm/[email protected]/font/fonts/ https://fonts.gstatic.com/ https://apps.mypurecloud.com/ https://cdn.jsdelivr.net/npm/[email protected]/font/fonts/ https://sleeknotestaticcontent.sleeknote.com
•Missing recommended values for font-src: self
img-srcLOW
https://www.google.lt blob: https://mnd-assets.mynewsdesk.com/ https://stats.g.doubleclick.net/ https://www.gstatic.com/ https://bat.bing.net https://www.google.se/ads/ https://bat.bing.com https://firebasestorage.googleapis.com/ https://ad.doubleclick.net/ https://www.google.be https://adservice.google.com https://adservice.google.com/ https://www.google.es https://www.google.se/pagead/ https://mapsresources-pa.googleapis.com/ https://www.google.nl https://www.google.no https://www.odla.lantmannenlantbruk.se https://www.google.ro https://www.pastridor.com/ https://www.facebook.com/ https://maps.gstatic.com/mapfiles/ https://www.google.com/pagead/ https://forms-eu1.hsforms.com/ https://*.lantmannen.com/ https://perf-na1.hsforms.com/embed/v3/counters.gif https://forms-na1.hsforms.com/embed/v3/ https://bat.bing.com/bat.js https://px.ads.linkedin.com https://googleads.g.doubleclick.net/pagead/ https://pagead2.googlesyndication.com https://track-eu1.hubspot.com/ https://www.google.fi https://www.lantmannen.com https://track.hubspot.com/ data: https://www.google.de https://fonts.gstatic.com/ https://www.google.co.in https://region1.analytics.google.com https://www.google.dk/ https://resources.mynewsdesk.com/ https://img.youtube.com/ https://api.taggrs.io https://www.googletagmanager.com/ https://analytics.sleeknote.com https://static.hsappstatic.net/ https://www.schulstadbakerysolutions.dk https://www.linkedin.com/ https://maps.googleapis.com/ https://www.lantmannenlantbrukmaskin.se https://perf-eu1.hsforms.com/ https://px4.ads.linkedin.com https://c.clarity.ms/c.gif https://forms.hsforms.com/embed/v3/ https://www.lantmannenbiorefineries.se https://sst.pastridor.com/ https://px.ads.linkedin.com/ https://static.hubspot.com/ https://sleeknotestaticcontent.sleeknote.com https://c.bing.com https://www.google.com/ads/ https://i.ytimg.com https://www.google.pl https://*.clarity.ms https://www.lantmannen.se/ https://mb.cision.com/ https://googleads.g.doubleclick.net/pagead/viewthroughconversion/ https://www.lantmannenunibake.dk https://www.lantmannencerealia.com https://cdn-ukwest.onetrust.com/ https://cta-service-cms2.hubspot.com/ https://vumbnail.com https://brand-incl.lantmannen.com https://chatwidget-prod.web.app 'self' https://2714594.fs1.hubspotusercontent-na1.net/ https://www.google-analytics.com/
•Missing recommended values for img-src: self
manifest-srcLOW
'self' https://cdn-ukwest.onetrust.com/ https://www.kraffthastfoder.se
•Missing recommended values for manifest-src: self
media-srcLOW
'self' https://cdn-ukwest.onetrust.com/
•Missing recommended values for media-src: self
object-srcLOW
'self' https://cdn-ukwest.onetrust.com/
•Missing recommended values for object-src: none
,LOW
https://forms-eu1.hsforms.com/ https://cdn-ukwest.onetrust.com/ https://odla-api-dev.azurewebsites.net/ https://forms.hsforms.com/ 'self' form-action
•Unknown directive: ,
frame-ancestorsLOW
https://sst.pastridor.com 'self' https://cdn-ukwest.onetrust.com/ https://www.lantmannencerealia.no
•Missing recommended values for frame-ancestors: self, none
base-uriLOW
https://www.startgranola.fi/ https://cdn-ukwest.onetrust.com/ https://www.schulstadbakerysolutions.de https://www.lantmannencerealia.fi/
•Missing recommended values for base-uri: self, none

Security Headers

✗Permissions-PolicyMissing

Restricts which browser features (camera, microphone, geolocation) the page can use, limiting attack surface.

How to add it:

nginx
add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
apache
Header always set Permissions-Policy "camera=(), microphone=(), geolocation=()"
cloudflare
Rules > Transform Rules > HTTP Response Header Modification > Set Permissions-Policy value
✗Referrer-PolicyMissing

Controls how much referrer information is sent with requests, preventing data leaks to third parties.

How to add it:

nginx
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
apache
Header always set Referrer-Policy "strict-origin-when-cross-origin"
cloudflare
Rules > Transform Rules > HTTP Response Header Modification > Set Referrer-Policy to "strict-origin-when-cross-origin"
✓Strict-Transport-SecurityPresent

max-age=31536000; includeSubDomains

Forces browsers to use HTTPS for all future requests, preventing man-in-the-middle attacks and SSL stripping.

✓X-Content-Type-OptionsPresent

nosniff

Prevents browsers from MIME-sniffing responses away from the declared Content-Type, blocking drive-by downloads.

✗X-Frame-OptionsMissing

Prevents the page from being embedded in iframes, protecting against clickjacking attacks.

How to add it:

nginx
add_header X-Frame-Options "DENY" always;
apache
Header always set X-Frame-Options "DENY"
cloudflare
Rules > Transform Rules > HTTP Response Header Modification > Set X-Frame-Options to "DENY"
✓X-XSS-ProtectionPresent

1

Legacy XSS filter for older browsers. Modern browsers use CSP instead. Set to "0" to avoid false positives.

3 recommended security headers are missing on swecon.lv.

Beyond headers: infrastructure exposure

via OSN, our sister project

Security headers protect the browser. OSN maps what's exposed underneath — servers, open ports, known CVEs, DNS and WHOIS.

See what the internet sees about swecon.lvWeak headers often come with other exposure — check the full picture.

swecon.lv

3 scans since 7/17/2025

B

Latest: 70/100

Total Scans

3

Latest Score

70/100

First Scan

7/17/2025

Last Scan

7/17/2025

Score Trend

Security score progression over 2 scans

Scan History

DateScoreCSPHeadersIssuesAction
Jul 17, 2025
B (70)
No
3/60View →
Jul 17, 2025
B (70)
No
3/60View →

Show off your security grade

Embed this badge on your site or README. It updates automatically after each scan and links back to this report.

HeaderTest security grade: B (70/100) for swecon.lv
HTML
<a href="https://headertest.com/results/swecon.lv" title="Security headers grade for swecon.lv — HeaderTest">
  <img src="https://headertest.com/api/badge/swecon.lv" alt="HeaderTest security grade: B (70/100) for swecon.lv" />
</a>
Markdown
[![HeaderTest security grade: B (70/100) for swecon.lv](https://headertest.com/api/badge/swecon.lv)](https://headertest.com/results/swecon.lv)