Scanned by Vigilai — free, non-intrusive, public headers only
Site is accessible over HTTPS.
TLS certificate is valid and trusted by browsers.
HTTP returned status 403. Redirect behaviour is ambiguous.
Strict-Transport-Security header is absent. Browsers won't enforce HTTPS on future visits.
Learn how to fix this →Content-Security-Policy is present, reducing the risk of cross-site scripting.
X-Frame-Options is set to "SAMEORIGIN". Iframe-based clickjacking is blocked.
X-Content-Type-Options: nosniff is set. MIME-sniffing attacks are blocked.
Referrer-Policy is "same-origin". Controls what URL data is shared with third parties.
A plain-English remediation plan for every security gap found on congress.gov — why each issue matters and step-by-step fixes, delivered as a PDF.
GET THE FULL FIX REPORT — $9.99Want to scan your own site?
RUN A FREE SCAN →