HTTP Security Headers
system-monitor.com
Final status: 200 · Server: cloudflare
http://system-monitor.com (301)https://www.system-monitor.com/ (302)https://www.system-monitor.com/dashboard/ (302)https://www.system-monitor.com/dashboard/msp_sso.php (302)https://sso.navigatorlogin.com/connect/authorize?client_id=949669a0-062a-4848-85c4-8243a63ddb1f&response_type=code&scope=openid+email+profile+offline_access&state=%7B%22data%22%3Anull%2C%22state%22%3A%223e0a7bab868f616df8c8c7a1b01e2128%22%2C%22originUrl%22%3Anull%7D&redirect_uri=https%3A%2F%2Fwww.system-monitor.com%2Fdashboard%2Fmsp_sso.php (302)https://sso.navigatorlogin.com/Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3D949669a0-062a-4848-85c4-8243a63ddb1f%26response_type%3Dcode%26scope%3Dopenid%2520email%2520profile%2520offline_access%26state%3D%257B%2522data%2522%253Anull,%2522state%2522%253A%25223e0a7bab868f616df8c8c7a1b01e2128%2522,%2522originUrl%2522%253Anull%257D%26redirect_uri%3Dhttps%253A%252F%252Fwww.system-monitor.com%252Fdashboard%252Fmsp_sso.php (200)
Security Headers
Strict-Transport-Security (HSTS) — missing
Forces browsers to use HTTPS, preventing protocol-downgrade attacks.
Content-Security-Policy (CSP) — missing
Limits where scripts/resources can load from — the strongest defense against XSS.
X-Frame-Options SAMEORIGIN
Blocks the site from being embedded in iframes (clickjacking protection).
X-Content-Type-Options
Stops browsers from MIME-sniffing responses away from the declared type.
Referrer-Policy — missing
Controls how much referrer information is sent to other sites.
Permissions-Policy — missing
Restricts access to browser features like camera, microphone, geolocation.