Security Headers
X-Content-Type-Options check
Stops browsers guessing a file's type, which blocks a class of attacks that disguise scripts as images or text.
Check this on your own domain now. It is free with a DomainGuard account, reads only public records, and gives you a report you can send to whoever runs your website.
What we look at
We check for X-Content-Type-Options: nosniff.
Why it matters to your business
It is a one-line header with no downside, and its absence shows up on every security questionnaire and scanner your customers or insurer might run.
How to fix it
- Send X-Content-Type-Options: nosniff on every response.
If you would rather not touch DNS or server settings yourself, forward this page and your report to whoever manages your website, or ask us to do it.
Keep an eye on it
A one-off check tells you how things stand today. On Starter and up, DomainGuard re-checks the domains it watches every day and alerts you in the app when something important changes, so you hear about it before a customer does.