{
 "run": {
  "date": "2026-11-09",
  "first_request": "2026-11-09T23:09:18.470Z",
  "providers_in_dataset": 66,
  "checked": 66,
  "graded": 65,
  "failed": 1,
  "retried": 0,
  "final_status_classes": {
   "2xx": 64,
   "4xx": 1
  },
  "ended_on_other_host": 5,
  "graded_4xx": 1,
  "dataset_urls_with_a_path": 5,
  "last_request": "2026-11-09T23:16:55.077Z",
  "failure_reasons": {
   "That domain points to a private or reserved address, so we do not check it.": 1
  },
  "checker": "https://penetrationtestservices.com/api/check-headers",
  "publisher_row_excluded": true
 },
 "primary_checks": [
  "https",
  "hsts",
  "csp",
  "framing",
  "nosniff",
  "referrer",
  "permissions",
  "leaks"
 ],
 "mean_primary_passed": 4.5,
 "pass_count_distribution": {
  "1": 3,
  "2": 7,
  "3": 8,
  "4": 11,
  "5": 18,
  "6": 10,
  "7": 7,
  "8": 1
 },
 "checks": {
  "https": {
   "present_in": 65,
   "pass": 65,
   "warn": 0,
   "fail": 0,
   "info": 0,
   "pass_pct_of_graded": 100
  },
  "hsts": {
   "present_in": 65,
   "pass": 45,
   "warn": 11,
   "fail": 9,
   "info": 0,
   "pass_pct_of_graded": 69.2
  },
  "csp": {
   "present_in": 65,
   "pass": 2,
   "warn": 40,
   "fail": 23,
   "info": 0,
   "pass_pct_of_graded": 3.1
  },
  "framing": {
   "present_in": 65,
   "pass": 35,
   "warn": 7,
   "fail": 23,
   "info": 0,
   "pass_pct_of_graded": 53.8
  },
  "nosniff": {
   "present_in": 65,
   "pass": 47,
   "warn": 0,
   "fail": 18,
   "info": 0,
   "pass_pct_of_graded": 72.3
  },
  "referrer": {
   "present_in": 65,
   "pass": 25,
   "warn": 40,
   "fail": 0,
   "info": 0,
   "pass_pct_of_graded": 38.5
  },
  "permissions": {
   "present_in": 65,
   "pass": 18,
   "warn": 47,
   "fail": 0,
   "info": 0,
   "pass_pct_of_graded": 27.7
  },
  "coop": {
   "present_in": 65,
   "pass": 5,
   "warn": 0,
   "fail": 0,
   "info": 60,
   "pass_pct_of_graded": 7.7
  },
  "leaks": {
   "present_in": 65,
   "pass": 55,
   "warn": 10,
   "fail": 0,
   "info": 0,
   "pass_pct_of_graded": 84.6
  },
  "cookies": {
   "present_in": 25,
   "pass": 21,
   "warn": 4,
   "fail": 0,
   "info": 0,
   "pass_pct_of_graded": 32.3
  },
  "cors": {
   "present_in": 9,
   "pass": 0,
   "warn": 0,
   "fail": 0,
   "info": 9,
   "pass_pct_of_graded": 0
  },
  "xxss": {
   "present_in": 19,
   "pass": 0,
   "warn": 0,
   "fail": 0,
   "info": 19,
   "pass_pct_of_graded": 0
  }
 },
 "hsts": {
  "https_responses": 65,
  "no_header": 9,
  "zero": 0,
  "under_6_months": 4,
  "six_to_12_months": 7,
  "one_year_plus": 45,
  "two_years_plus": 13,
  "include_subdomains": 32,
  "preload": 21
 },
 "csp": {
  "no_header": 23,
  "report_only_only": 2,
  "enforced": 40,
  "enforced_pass": 2,
  "weaknesses": {
   "unsafe_eval": 13,
   "no_script_or_default_src": 20,
   "no_object_src": 24,
   "unsafe_inline_without_nonce_or_hash": 16,
   "wildcard_or_scheme_source": 6
  }
 },
 "framing": {
  "frame_ancestors": 29,
  "x_frame_options_only": 13,
  "none": 23,
  "wildcard": 7
 },
 "referrer": {
  "missing": 34,
  "strict": 25,
  "weaker": 6,
  "unsafe_url": 0
 },
 "leaks": {
  "any": 10,
  "server_with_version": 0,
  "x_powered_by": 10,
  "x_generator": 0,
  "x_aspnet": 0
 },
 "cookies": {
  "responses_with_cookies": 25,
  "missing_secure_or_samesite": 4,
  "missing_httponly": 2,
  "only_cloudflare_cookies": 21
 },
 "coop": {
  "same_origin": 5,
  "other_value": 1,
  "missing": 59
 }
}
