HeaderAudit
C

docusign.com

Score 70/100 · scanned 2026-08-04

Content-Security-Policy

No enforcing Content-Security-Policy on the homepage response. What that means →

Headers sent

HeaderValue
content-security-policy-report-onlydefault-src 'self' https://pref.docusign.com https://apps.docusign.com https://events.docusign.com https://momentum.docusign.com https://dsucustomers.docusign.com https://account.docusign.com https://…
strict-transport-securitymax-age=31536000
x-content-type-optionsnosniff
serverNetlify
x-powered-byNext.js

Re-scan live

This is a snapshot from 2026-08-04. Check it now: