Security & Vulnerability Audits

Automated security posture assessments across applications

Detected Security Findings (4)

INFORMATIONALINFORMATION_DISCLOSUREDisposable E-Commerce Demo

Server Banner / Technology Information Disclosure

Disclosed header banner: DisposableApp/1.0

Remediation: Suppress Server and X-Powered-By response headers in reverse proxy or web server configuration.

2026-10-29 00:53:37 UTCTarget: http://disposable-app-container:3899
LOWHTTP_HEADERSDisposable E-Commerce Demo

Missing Clickjacking Defense (X-Frame-Options)

X-Frame-Options or frame-ancestors directive not found.

Remediation: Set X-Frame-Options: DENY or SAMEORIGIN to prevent framing attacks.

2026-10-29 00:53:37 UTCTarget: http://disposable-app-container:3899
MEDIUMHTTP_HEADERSDisposable E-Commerce Demo

Missing Content-Security-Policy (CSP)

Response lacks Content-Security-Policy header.

Remediation: Implement a restrictive CSP restricting script-src, object-src, and default-src.

2026-10-29 00:53:37 UTCTarget: http://disposable-app-container:3899
HIGHTRANSPORT_SECURITYDisposable E-Commerce Demo

Unencrypted Insecure Transport (HTTP)

Application URL is served over unencrypted plain text: http://disposable-app-container:3899

Remediation: Enforce HTTPS and redirect all HTTP traffic with HSTS.

2026-10-29 00:53:37 UTCTarget: http://disposable-app-container:3899