Complimentary 90-day, on-prem license available for entities involved in Covid19 response.
HTTP Strict Transport Security (HSTS) Max-Age Value Too Low
Severity: Information
Summary
HTTP Strict Transport Security (HSTS) header's max-age value is lower than the recommended value.
Remediation
It is recommended to set the max-age to a big value like 31536000 (12 months) or 63072000 (24 months).
Classifications
CWE-16, ISO27001-A.14.1.2, WASC-15, OWASP PC-C1
Vulnerability Index
You can search and find all vulnerabilities
Select Category
OR
Search Vulnerability
