What we found
1 of these are critical or high. This page lists what a crawler runs into. The paid report adds the evidence for each one and how to fix it.
- highhttps://www.zaref.dev/ does not respond at all.
- mediumNo max-image-preview:large in the robots meta tag.
- lowNo Strict-Transport-Security header.
- lowStandard security headers are missing: Content-Security-Policy, X-Frame-Options (or CSP frame-ancestors), X-Content-Type-Options: nosniff.
Verify this
The badge below is generated from the same record and updates when the site is re-checked.
Anyone can read the record without paying: https://402registry.com/api/check?url=https://zaref.dev/
