Skip to main content
Back to overview

Recipe details

Security: HTTP Header policies

Security: HTTP Header policies

37.7M records

Key facts about Security: HTTP Header policies

Records
37733874 records
Websites tracked
37733874 websites use Security: HTTP Header policies
Industries
Security
Categories
Security
Published
Last updated
Provider
Dataprovider.com

About Dataprovider Research

Dataprovider.com transforms the internet into the largest search engine of structured web data for data-minded professionals so that they can do detailed research, make better decisions, measure the digital economy and fight cybercrime. Creating the right dataset is difficult due to the hundreds of filters and values that each field contains. These recipes are custom prefiltered datasets that help you get the most complete results.

About this recipe

HTTP headers are vital for enhancing web application security. Here are key ways they can be used:

- Content Security Policy (CSP): Specifies trusted sources for dynamic resources, preventing Cross-Site Scripting (XSS) attacks.

- HTTP Strict Transport Security (HSTS): Enforces HTTPS connections, protecting against SSL stripping and man-in-the-middle attacks.

- X-Content-Type-Options: Prevents MIME-sniffing, reducing the risk of drive-by download attacks by setting it to "nosniff".

- X-Frame-Options: Controls page rendering in frames, helping to prevent clickjacking attacks.

- Cross-Origin Resource Sharing (CORS): Manages how resources can be accessed from different domains, preventing unauthorized access.

- X-XSS-Protection: Enables browser XSS filters to block reflected XSS attacks.

- Identifying Outdated Software: Reveals server software versions, helping to identify potential security vulnerabilities from outdated software.

Use cases

  • Create a data set for marketing research

Related to this recipe

  • Unique domains

    Compile an accurate list of all the unique registered domains from gTLD, new gTLD, sTLD and ccTLDs that are indexed by Dataprovider.

    333.5M records

  • All New gTLD domains

    The New gTLD Program is an initiative coordinated by the Internet Corporation for Assigned Names and Numbers (ICANN) to enable an expansion of the domain name system.

    43.9M records

  • Security: Unsupported PHP versions

    Unsupported PHP versions lack security patches, leaving applications vulnerable to attacks and exploitation due to unpatched issues.

    7.5M records

  • Security: Phishing and spam

    Domains that are vulnerable for phishing or spam. These domains have at least a DNS TXT record set but are missing a SPF, DMARC or DKIM record.

    12.1M records

  • Security: Unsupported NGINX versions

    Unsupported NGINX versions lack security patches, leaving applications vulnerable to attacks and exploitation due to unpatched issues.

    2.2M records