Share this page with your team. The site owner can track work after verifying the domain on the monitoring page.
Based on the latest scan: Tue, 22 Sep 2026 07:11:10 GMT. Fixes are confirmed when a later scan no longer finds the issue.
Begin with a report-only policy, inventory required origins, then enforce a restrictive policy.
Measured: Header absent · Target: Header present