ENEnglish
LTLietuviškai
DEDeutsch
FRFrançais
RUРусский
ESEspañol
PLPolski
ITItaliano
UKУкраїнська
CSČeština
PTPortuguês
JA日本語
LVLatviešu valoda
ETEesti
HUMagyar
IDBahasa Indonesia
TRTürkçe
HIहिन्दी
ELΕλληνικά
ARالعربية
THไทย
VITiếng Việt
RORomână
MSBahasa Melayu
BNবাংলা#Security headers
Security headers are short instructions a web server sends to the browser with every page. Articles tagged here explain headers such as Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy and Permissions-Policy. Each guide describes what the header protects against in plain words. You will find ready-to-adapt examples for Apache, Nginx and common hosting setups. The articles also explain how to roll out a header safely without breaking the site. Read them when an audit reports missing or weak headers.
Aug 16, 2026 · 8 min readExposed Software Versions: How to Hide Server and CMS Details
Server, PHP and CMS version numbers in headers and page code help attackers pick targets. Learn where versions leak and how to hide them…
Aug 9, 2026 · 8 min readContent Security Policy for Beginners: A Practical Setup Guide
Content Security Policy blocks injected scripts, but a bad policy breaks your site. Learn the key directives and a report-only rollout that works in…
Aug 7, 2026 · 7 min readHSTS Explained: How to Enable Strict-Transport-Security Safely
HSTS makes browsers use HTTPS for your domain every time. Learn what max-age, includeSubDomains and preload mean, and how to roll HSTS out without…
Aug 6, 2026 · 8 min readHTTP Security Headers Explained: What Each One Does
A plain-English guide to HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy and Permissions-Policy, with safe starting values for each.