Security headers explained

• Strict-Transport-Security keeps browsers on HTTPS.
• X-Frame-Options stops your pages being framed by other sites.
• X-Content-Type-Options prevents content sniffing.
• Referrer-Policy controls what other sites learn about where visitors came from.
• Content-Security-Policy limits where scripts can load from.

Our products send sensible headers by default and let you adjust them under Security and access → Hardening.