Security Headers

This check examines your server's HTTP response headers for important security protections. It looks for Content-Security-Policy (which controls what resources can load on your page), Referrer-Policy (which controls what information is sent when users click links), Permissions-Policy (which controls access to browser features like camera and microphone), and X-Content-Type-Options (which prevents browsers from misinterpreting file types).

Think of security headers as invisible shields that protect your website and your visitors. They defend against common attacks like cross-site scripting (XSS — where attackers inject malicious code into your pages), clickjacking (where your site is loaded inside a hidden frame to trick users), and other web-based threats. Having these headers shows that you take your visitors' security seriously.

Missing security headers leave your site and its visitors vulnerable to various attacks. While they are NOT direct SEO ranking factors, security incidents can severely damage your site's reputation, lead to browser warnings, and cause Google to flag your site as unsafe — all of which indirectly hurt your traffic and user trust.