ERT-CONFIG-006
Missing Permissions-Policy
LowA02:2025CWE-693
Why it matters
Security headers, TLS, email spoofing, takeovers. This check looks specifically for: missing permissions-policy.
How to fix it
Send Permissions-Policy: camera=(), microphone=(), geolocation=().
How we test it
Passive — runs in the free check, looks only at what a browser can see.