Content Sniffing Not Disabled

OPTIONS Method Is Enabled

Clickjacking: X-Frame-Options Header Missing

Error Page Discloses Web Server Version

How To Disable Web Dav Extensions?

How To Configure Access-Control-Allow-Origin Header?

How To Disable Custom Errors At Webroot?

Excessive-Information-In-Headers

Protect Server Against Heartbleed OpenSSL Vulnerability

Session Cookie Found Without Secure Flag Set.

Session Cookie Found Without HTTPOnly Set

TRACE Method Is Enabled

Web Server Default Welcome Page

How To Disable Autocomplete?

Protect Server Against POODLE SSLv3 Vulnerability

Custom_errors

How To Encrypt Viewstates In Dotnet?

Excessive Information About The Server And Web Layer Are Visible In The Response Headers.