Launch Check: www.11ty.dev
← Launch Check · Download CSV
https://www.11ty.dev/ · 2026-10-18T08:50:06.647Z · launchcheck/1.0
critical0
high0
medium1
low5
info1
Scope: 25 page(s) crawled · 150 of 2675 links checked · 6 client JS file(s) scanned · sitemap: 227 URLs · homepage HTTP 200 in 858 ms.
Issues
| Severity | Area | Detail |
|---|
| medium | security-headers | No Content-Security-Policy: weaker protection against XSS / injected scripts. |
| low | security-headers | X-Content-Type-Options: nosniff missing. |
| low | security-headers | Referrer-Policy missing: full URLs may leak to third parties. |
| low | security-headers | No X-Frame-Options or CSP frame-ancestors: page can be framed (clickjacking). |
| low | meta | No canonical link |
| low | social | No twitter:card meta |
| info | security-headers | Permissions-Policy not set. |
Meta & social preview
| Title | Eleventy is a simpler static site generator |
| Description | Eleventy is a simpler static site generator |
| Canonical | missing |
| og:title | Eleventy is a simpler static site generator |
| og:image | https://www.11ty.dev/img/open-graph.jpg |
| twitter:card | missing |
| Viewport | width=device-width, initial-scale=1.0 |
| lang | en |
| h1 count | 1 |
| robots meta | missing |
Security headers
strict-transport-security | ✅ max-age=63072000 |
content-security-policy | ❌ missing |
x-content-type-options | ❌ missing |
referrer-policy | ❌ missing |
permissions-policy | ❌ missing |
x-frame-options | ❌ missing |
Read-only check: only public pages were requested (GET/HEAD), with limited concurrency, respecting robots.txt for crawling. Secret-pattern matches are shown masked and may include false positives; verify before rotating keys. Not a penetration test.