Content-Security-Policy

tenable.com sends an enforcing CSP. It is allowlist-based.

frame-ancestors 'self' https://tenable.com https://*.tenable.com https://tenablecloud.cn https://www.tenablecloud.cn;

Directive	Sources
frame-ancestors	'self' https://tenable.com https://*.tenable.com https://tenablecloud.cn https://www.tenablecloud.cn

Headers sent

Header	Value
strict-transport-security	max-age=31536000
x-content-type-options	nosniff
permissions-policy	browsing-topics=()
x-xss-protection	1; mode=block
server	cloudflare

Critical findings

Re-scan live

This is a snapshot from 2026-08-04. Check it now:

Scan