content-security-policy

Content Security Policy (CSP) header not implemented

contribute

Contribute.json isn't required on websites that don't belong to Mozilla

cookies

cross-origin-resource-sharing

Content is not visible via cross-origin resource sharing (CORS) files or headers

public-key-pinning

HTTP Public Key Pinning (HPKP) header not implemented

redirection

Initial redirection is to HTTPS on same host, final destination is HTTPS

referrer-policy

strict-transport-security

HTTP Strict Transport Security (HSTS) header not implemented

subresource-integrity

Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin

x-content-type-options

X-Content-Type-Options header not implemented

x-frame-options

X-Frame-Options (XFO) header not implemented

x-xss-protection

Diagnostics

Metrics

http

tcpwrapped

https

socks

pvuniwien

hp-server

wsdapi

amqp

unknown

A CAA record was discovered. A CAA record is used to specify which certificate authorities (CAs) are allowed to issue certificates for a domain.

CAA Record

DNS SaaS Service Detection

Allowed Options Method

Some Apache servers have the version on the response header. The OpenSSL version can be also obtained

Apache Detection

This template searches for missing HTTP security headers. The impact of these missing headers can vary.


HTTP Missing Security Headers

robots.txt endpoint prober

WAF Detection

OpenSSH Service - Detect

Extract the issuer's organization from the target's certificate. Issuers are entities which sign and distribute certificates.


Detect SSL Certificate Issuer

Extract the Subject Alternative Name (SAN) from the target's certificate. SAN facilitates the usage of additional hostnames with the same certificate.


SSL DNS Names

TLS version detection is a security process used to determine the version of the Transport Layer Security (TLS) protocol used by a computer or server.
It is important to detect the TLS version in order to ensure secure communication between two computers or servers.


TLS Version - Detect

_pk_ses.147.a4f0

_pk_id.147.a4f0

TYPO3 is a free and open-source Web content management system written in PHP.

TYPO3 CMS

Sentry is an open-source platform for workflow productivity, aggregating errors from across the stack in real time.

Sentry

PHP is a general-purpose scripting language used for web development.

Leaflet is the open-source JavaScript library for mobile-friendly interactive maps.

Leaflet

React is an open-source JavaScript library for building user interfaces or UI components.

React

Apache is a free and open-source cross-platform web server software.

Apache HTTP Server

Matomo Analytics is a free and open-source web analytics application, that runs on a PHP/MySQL web-server.

Matomo Analytics

Livefyre is a platform that integrates with the social web to boost social interaction.

Livefyre

Webpack is an open-source JavaScript module bundler.

Webpack

Progressive Web Apps (PWAs) are web apps built and enhanced with modern APIs to deliver enhanced capabilities, reliability, and installability while reaching anyone, anywhere, on any device, all with a single codebase.

Module Federation is a webpack technology for dynamically loading parts of other independently deployed builds.

Cookies	Domaine	HTTP Only	Secure
_pk_ses.147.a4f0	.conseiller-numerique.gouv.fr	❌	❌
_pk_id.147.a4f0	.conseiller-numerique.gouv.fr	❌	❌

https://coop.conseiller-numerique.gouv.fr

LightHouse

https://coop.conseiller-numerique.gouv.fr/

Eco-index

GES: 1.36 gramme(s) par visite

Eau : 2.04 cl par visite

Ça veut dire quoi ?

Scripts tiers et cookies

Page de statistiques

Déclaration de mise en accessibilité