Security Headers
Referrer-Policy check
Controls how much of your page addresses leak to other sites when visitors click a link.
Check this on your own domain now. It is free with a DomainGuard account and works on any domain. The check reads only what your domain publishes, and gives you a report you can send to whoever runs your website.
What we look at
We read the Referrer-Policy header.
Why it matters to your business
Current browsers already default to strict-origin-when-cross-origin, which sends other sites only your domain name. Setting it yourself makes that the rule in every browser and stops a looser policy being applied by accident, so full page addresses (which can include search terms, order numbers or reset tokens) are not passed to the third-party sites your pages link to or load from.
How to fix it
- Send Referrer-Policy: strict-origin-when-cross-origin.
If you would rather not touch DNS or server settings yourself, forward this page and your report to whoever manages your website, or ask us to do it.
Check your own site for this
A free outside-in check of your website, email and domain records, with what to fix first. No card and no password to choose.