Review Security Headers And Dependency Risk

What to inspect

• app-layer headers
• proxy, CDN, Nginx, ingress, or platform headers
• CSP presence and quality
• frame-ancestors
• X-Frame-Options
• X-Content-Type-Options
• Referrer-Policy
• Permissions-Policy
• package manifest and lockfiles
• dependency audit output

Questions to answer