X-Content-Type-Options

What it can report

• ! low no X-Content-Type-Options How to fix it
• ! low a value other than nosniff How to fix it

How it counts

The score is computed by fixed rules from the checks that ran, and this check has a weight of 1 within Security. A check that errors or is skipped is shown as "could not check" and left out of the score, never counted as a pass. Fixes and the AI summary are written after scoring and never change it.

Related checks

• certificate chain and expiry
• certificate names and validity window
• TLS protocol versions
• cipher suites
• HSTS
• HTTP to HTTPS redirect