Content-Security-Policy

paloaltonetworks.com sends an enforcing CSP. It is allowlist-based.

frame-ancestors 'self' paloaltonetworks.com *.paloaltonetworks.com paloaltonetworks.hub.nexuscenter.io www.deploybravely.com stage.deploybravely.com www.paloaltonetworks.com.br www.paloaltonetworks.lat www.paloaltonetworks.jp stage.paloaltonetworks.com.br stage.paloaltonetworks.lat stage.paloaltonetworks.jp;, object-src 'none'

Directive	Sources
frame-ancestors	'self' paloaltonetworks.com *.paloaltonetworks.com paloaltonetworks.hub.nexuscenter.io www.deploybravely.com stage.deploybravely.com www.paloaltonetworks.com.br www.paloaltonetworks.lat www.paloaltonetworks.jp stage.paloaltonetworks.com.br stage.paloaltonetworks.lat stage.paloaltonetworks.jp
,	object-src 'none'

Headers sent

Header	Value
strict-transport-security	max-age=31536000
x-frame-options	SAMEORIGIN
x-content-type-options	nosniff
permissions-policy	accelerometer=(), bluetooth=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
server	Apache

Critical findings

Re-scan live

This is a snapshot from 2026-08-04. Check it now:

Scan