Check catalog
158 checks. Every one explained.
Each check has a permanent ID, the attack it models, why it matters and how to fix it.
18 checks
- ERT-CONFIG-001Missing or weak Content-Security-PolicyPassiveMedium
- ERT-CONFIG-002Missing HSTSPassiveMedium
- ERT-CONFIG-003Clickjacking protection missingPassiveMedium
- ERT-CONFIG-004Missing X-Content-Type-OptionsPassiveLow
- ERT-CONFIG-005Missing Referrer-PolicyPassiveLow
- ERT-CONFIG-006Missing Permissions-PolicyPassiveLow
- ERT-CONFIG-007TLS certificate or protocol weaknessPassiveHigh
- ERT-CONFIG-008HTTP not redirected to HTTPSPassiveMedium
- ERT-CONFIG-009Verbose errors or debug modePassiveMedium
- ERT-CONFIG-010Directory listing enabledPassiveMedium
- ERT-CONFIG-011Server or framework version disclosedPassiveLow
- ERT-CONFIG-012Exposed internal toolingPassiveHigh
- ERT-CONFIG-013Email spoofing protection weak (SPF/DMARC)PassiveMedium
- ERT-CONFIG-014Subdomain takeoverPassiveHigh
- ERT-CONFIG-015Missing security.txtPassiveInfo
- ERT-CONFIG-016Missing CAA DNS recordPassiveInfo
- ERT-CONFIG-017Cookies without Secure flagPassiveLow
- ERT-CONFIG-018Dockerfile / IaC misconfigurationCodeMedium
