#Security headers

Security headers are short instructions a web server sends to the browser with every page. Articles tagged here explain headers such as Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy and Permissions-Policy. Each guide describes what the header protects against in plain words. You will find ready-to-adapt examples for Apache, Nginx and common hosting setups. The articles also explain how to roll out a header safely without breaking the site. Read them when an audit reports missing or weak headers.