flightPATH

IPv6 Virtual Service IPv4 Real Servers. Adjust Host header Ideal for IIS Real Servers

Remove the HTTP response header X-Powered-By (if present) to prevent information leakage.

Remove the HTTP response header X-AspNetMvc-Version (if present) to prevent information leakage.

Remove the HTTP response header X-AspNet-Version (if present) to prevent information leakage.

Remove the HTTP response header Server (if found) to prevent information leakage.

Detect 404 response codes Redirect to custom page Option to syslog

Check outgoing content Mask sensitive information Powerful search pattern

Faster page loading speeds Reduce network traffic Reduce load on webservers

Add an X-XSS-Protection HTTP response header (if not present) to enable browser cross site scripting protections.

Add an X-Frame-Options HTTP response header (if not present) with the SAMEORIGIN value, to protect against so-called 'click-jacking'. DENY is more secure but may cause Java issues.

Add an X-Content-Type-Options HTTP response header (if not present) to prevent browser MIME sniffing and so-called drive-by download attacks.

Add a Strict-Transport-Security HTTP response header (if not present) to ensure the client uses HTTPS for all hyperlinks.