Security report for flashscore.ph

8 findings rated critical or high. Fix these first.

1. Security headers

   See the evidence for Security headers

   Security headers are instructions your web server sends to every visitor’s browser. Missing ones leave visitors more exposed to attacks such as clickjacking and injected scripts.

   • High

     Missing Strict-Transport-Security header

     Forces HTTPS connections

     What to do: Add "Strict-Transport-Security: max-age=31536000; includeSubDomains; preload"

   • High

     Missing X-Frame-Options header

     Prevents clickjacking attacks

     What to do: Add "X-Frame-Options: DENY" or "X-Frame-Options: SAMEORIGIN"

   • High

     Missing Content-Security-Policy header

     Controls resources the browser is allowed to load

     What to do: Implement a Content-Security-Policy appropriate for your application

2. NIS2 compliance

   See the evidence for NIS2 compliance

   NIS2 expects organisations in scope to show basic security hygiene. These public signals are what an auditor or customer sees first.

   • High

     No information security framework found

     NIS2 requires documented cybersecurity and information security measures

     What to do: Implement and document information security policies and procedures

   • High

     No security policy documentation found

     NIS2 requires documented cybersecurity governance and risk management

     What to do: Create and publish cybersecurity policy and framework documentation