Security

9 audit rules in this category. Click any rule to see the full description, examples, and an AI-agent fix snippet.

uses_https critical

Page uses HTTPS

Checks if the page is served over HTTPS.
mixed_content high

No mixed content detected

Checks for HTTP resources loaded on HTTPS pages.
hsts_header medium

HSTS header is present

Checks for the Strict-Transport-Security header.
security_xcto low

X-Content-Type-Options header

X-Content-Type-Options header. This audit rule is part of the Booltools SEO Crawler rule set for optimizing search engine visibility.
security_xfo low

X-Frame-Options header

X-Frame-Options header. This audit rule is part of the Booltools SEO Crawler rule set for optimizing search engine visibility.
security_csp low

Content-Security-Policy header

Content-Security-Policy header. This audit rule is part of the Booltools SEO Crawler rule set for optimizing search engine visibility.
security_referrer low

Referrer-Policy header

Referrer-Policy header. This audit rule is part of the Booltools SEO Crawler rule set for optimizing search engine visibility.
security_permissions low

Permissions-Policy header

Permissions-Policy header. This audit rule is part of the Booltools SEO Crawler rule set for optimizing search engine visibility.
security_server_disclosure low

Server version not disclosed

Server version not disclosed. This audit rule is part of the Booltools SEO Crawler rule set for optimizing search engine visibility.