Scope: 25 page(s) crawled · 150 of 230 links checked · 1 client JS file(s) scanned · sitemap: not found · homepage HTTP 200 in 158 ms.
| Severity | Area | Detail |
|---|---|---|
| high | security-headers | HSTS missing: browsers may load the site over plain HTTP. |
| medium | security-headers | No Content-Security-Policy: weaker protection against XSS / injected scripts. |
| medium | social | Open Graph incomplete (og:title missing, og:image ok): link previews on Slack/X/LinkedIn will look bare. |
| medium | indexing | No XML sitemap found (robots.txt / sitemap.xml) |
| medium | broken-links | Broken link (404) https://www.cloudflare.com/developer-platform/workers-kv/ on https://hono.dev/docs/ |
| low | security-headers | X-Content-Type-Options: nosniff missing. |
| low | security-headers | Referrer-Policy missing: full URLs may leak to third parties. |
| low | security-headers | No X-Frame-Options or CSP frame-ancestors: page can be framed (clickjacking). |
| low | meta | No canonical link |
| low | indexing | robots.txt not found (HTTP 404) |
| info | security-headers | Permissions-Policy not set. |
| Title | Hono - Web framework built on Web Standards |
| Description | Web framework built on Web Standards for Cloudflare Workers, Fastly Compute, Deno, Bun, Vercel, Node.js, and others. Fast, but not only fast. |
| Canonical | missing |
| og:title | missing |
| og:image | https://hono.dev/images/hono-title.png |
| twitter:card | summary_large_image |
| Viewport | width=device-width,initial-scale=1 |
| lang | en-US |
| h1 count | 1 |
| robots meta | missing |
strict-transport-security | ❌ missing |
content-security-policy | ❌ missing |
x-content-type-options | ❌ missing |
referrer-policy | ❌ missing |
permissions-policy | ❌ missing |
x-frame-options | ❌ missing |
Read-only check: only public pages were requested (GET/HEAD), with limited concurrency, respecting robots.txt for crawling. Secret-pattern matches are shown masked and may include false positives; verify before rotating keys. Not a penetration test.