Website triage
Security-header checks are useful launch signals, but they are not a full security audit. Results can vary by URL, red...
Details
A missing or unexpected header can belong to a redirect response instead of the final page. Confirm status and redirec...
A missing or unexpected header can belong to a redirect response instead of the final page. Confirm status and redirect chain before interpreting header findings.
Security headers such as HSTS, CSP, X-Frame-Options, content-type, and referrer policy describe browser-facing behavio...
Security headers such as HSTS, CSP, X-Frame-Options, content-type, and referrer policy describe browser-facing behavior. They do not prove the application is vulnerability-free.
Certificate, host, DNS, and IP signals help explain why a site behaves differently across environments. Run them as su...
Certificate, host, DNS, and IP signals help explain why a site behaves differently across environments. Run them as supporting checks, not substitutes for application review.
Use Convurter reports to route issues to hosting, DNS, CDN, app, or security owners. Treat the report as a point-in-ti...
Use Convurter reports to route issues to hosting, DNS, CDN, app, or security owners. Treat the report as a point-in-time diagnostic, not a compliance artifact.
Related tools
