Get a demo
AppSec with Zero Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo

HTTP Strict Transport Security (HSTS) Max-Age Value Too Low

Severity: Information
Summary#

HTTP Strict Transport Security (HSTS) header's max-age value is lower than the recommended value.

Remediation#
It is recommended to set the max-age to a big value like 31536000 (12 months) or 63072000 (24 months).
Classifications#
, ,
Invicti Security Insights

Select Category

OR

Search Vulnerability

Tags

HTTP HSTS

Related Vulnerabilities

Invicti Logo

Dead accurate, fast & easy-to-use Web Application Security Scanner

Get a demo