Security Report Summary
D
Site: https://www.biotronik.com/en-gb
IP Address: 151.101.130.216
Report Time: 28 Oct 2026 11:15:26 UTC
Headers:
  • X-Content-Type-Options
  • Strict-Transport-Security
  • Content-Security-Policy
  • X-Frame-Options
  • Referrer-Policy
  • Permissions-Policy
Advanced:
Your site could be at risk, let’s perform a deeper security analysis of your site and APIs:
Missing Headers
Content-Security-PolicyContent Security Policy is an effective measure to protect your site from XSS attacks. By whitelisting sources of approved content, you can prevent the browser from loading malicious assets.
X-Frame-OptionsX-Frame-Options tells the browser whether you want to allow your site to be framed or not. By preventing a browser from framing your site you can defend against attacks like clickjacking. Recommended value "X-Frame-Options: SAMEORIGIN".
Referrer-PolicyReferrer Policy is a new header that allows a site to control how much information the browser includes with navigations away from a document and should be set by all sites.
Permissions-PolicyPermissions Policy is a new header that allows a site to control which features and APIs can be used in the browser.
Raw Headers
HTTP/2200
cache-controlmax-age=21600, public
content-languageen-gb
content-typetext/html; charset=UTF-8
etag"1793086452"
expiresSun, 19 Nov 1978 05:00:00 GMT
last-modifiedTue, 27 Oct 2026 07:34:12 GMT
traceresponse00-18e252d2224246995e447efa9a35529e-f46b5cc240953c52-01
x-content-type-optionsnosniff
x-debug-infoeyJyZXRyaWVzIjowfQ==
x-drupal-cacheHIT
x-drupal-cache-contextscookies:big_pipe_nojs languages:language_content languages:language_interface languages:language_url route session.exists theme timezone url user user.node_grants:view
x-drupal-cache-max-age0 (Uncacheable)
x-drupal-cache-tagsCACHE_MISS_IF_UNCACHEABLE_HTTP_METHOD:form block_view config:antibot.settings config:block.block.biotronik_breadcrumbs config:block.block.biotronik_changeofownershipvascularinterventionproducts_2 config:block.block.biotronik_content config:block.block.biotronik_disclaimerforprofessionals config:block.block.biotronik_doyouwanttoleavethiswebsite config:block.block.biotronik_help config:block.block.biotronik_local_actions config:block.block.biotronik_messages config:block.block.biotronik_notalegalpacientes config:block.block.biotronik_notalegalpnoticiasprofesionales config:block.block.biotronik_notalegalproductos config:block.block.biotronik_notalegalprofesionalessanitarios config:block.block.biotronik_page_title config:block.block.biotronik_primary_local_tasks config:block.block.biotronik_secondary_local_tasks config:block.block.biotronik_startpage config:block.block.biotronikcountryselectorblock config:block.block.footerclaimfollowuscontactblock config:block.block.footercopyrightblock config:block.block.footermaintopnavigationblock config:block.block.global_search_header config:block.block.global_search_page config:block.block.legal config:block.block.legalvascomed config:block.block.mainnavigation config:block.block.mainnavigationargentinaspanish config:block.block.mainnavigationaustraliaenglish config:block.block.mainnavigationaustriagerman config:block.block.mainnavigationbrazilianportuguese config:block.block.mainnavigationcanadaenglish config:block.block.mainnavigationchinasimplified config:block.block.mainnavigationfrance config:block.block.mainnavigationgermany config:block.block.mainnavigationitalyitalian config:block.block.mainnavigationlevels1teasersblock config:block.block.mainnavigationlevels2and3sidebarblock config:block.block.mainnavigationlevels4and5block config:block.block.mainnavigationpolandpolish config:block.block.mainnavigationportugalportuguese config:block.block.mainnavigationsoutheastasiaenglish config:block.block.mainnavigationspainspanish config:block.block.mainnavigationswitzerlandenglish config:block.block.mainnavigationswitzerlandgerman config:block.block.mainnavigationthenetherlandsdutch config:block.block.mainnavigationunitedkingdomenglish config:block.block.mainnavigationusenglish config:block.block.mainnavigationvascomed config:block.block.mainnavigationvascomedgermany config:block.block.sitebranding config:block_list config:domain.config.www_biotronik_com.system.site config:domain.record.www_biotronik_com config:filter.format.basic_html config:filter.format.full_html config:filter.format.plain_text config:filter.settings config:google_tag.container.biotronik_gtm config:google_tag_container_list config:image.style.full_width_mobile config:image.style.half_desktop config:image.style.half_desktop_scale config:image.style.half_hd config:image.style.half_hd_scale config:image.style.half_wide config:image.style.half_wide_scale config:image.style.hero_intro_desktop config:image.style.hero_intro_hd config:image.style.hero_intro_tablet config:image.style.hero_intro_wide config:image.style.one_third_desktop config:image.style.one_third_large config:image.style.one_third_tablet config:image.style.two_thirds_hd config:image.style.two_thirds_wide config:paragraphs.settings config:responsive_image.styles.half_width config:responsive_image.styles.half_width_thin config:responsive_image.styles.hero_intro config:responsive_image.styles.one_third config:responsive_image.styles.two_thirds config:search_api.index.global_search_index config:search_api_autocomplete.search.global_search_solr config:system.menu.legal config:system.menu.main config:system.menu.main-en-gb config:system.site config:user.role.anonymous config:views.view.latest_content file:2100 http_response local_task media:1695 media:1697 media:1728 media:1758 media:1764 media:1769 media:2186 media:2311 media:398 media:6243 media:6507 media:6550 media:6677 media:6686 media:6938 media_view menu:main-en-gb node:25120 node:40805 node:40806 node:40807 node:40808 node:68883 node:83917 node:83942 node:83943 node_list node_view paragraph:16953 paragraph:17753 paragraph:17900 paragraph:17986 paragraph:18370 paragraph:18730 paragraph:18972 paragraph:18977 paragraph:19198 paragraph:1979 paragraph:1980 paragraph:1981 paragraph:1982 paragraph:1983 paragraph:1985 paragraph:4673 paragraph:4674 paragraph:4675 paragraph:4814 paragraph:5576 paragraph:6812 paragraph_view rendered search_api_autocomplete_search_list:views:global_search_solr search_api_list:global_search_index user:0 user:10 user:17
x-drupal-dynamic-cacheMISS
x-generatorDrupal 10 (https://www.drupal.org)
x-platform-cacheMISS
x-platform-clusterkr4hnjft6eb74-master-7rqtwti
x-platform-processoru6pnie4v7xhnkqshbltkwvl4ci
x-platform-routerkh2ahwnbcsubiubgckv6pxi7t4
via1.1 varnish, 1.1 varnish
accept-rangesbytes
age10544
dateWed, 28 Oct 2026 11:15:26 GMT
x-served-bycache-fra-etou8220090-FRA, cache-dub4348-DUB
x-cacheHIT, MISS
x-cache-hits128, 0
varyCookie
strict-transport-securitymax-age=31557600
content-length152794
Upcoming Headers
Cross-Origin-Embedder-PolicyCross-Origin Embedder Policy allows a site to prevent assets being loaded that do not grant permission to load them via CORS or CORP.
Cross-Origin-Opener-PolicyCross-Origin Opener Policy allows a site to opt-in to Cross-Origin Isolation in the browser.
Cross-Origin-Resource-PolicyCross-Origin Resource Policy allows a resource owner to specify who can load the resource.
Additional Information
x-content-type-optionsX-Content-Type-Options stops a browser from trying to MIME-sniff the content type and forces it to stick with the declared content-type. The only valid value for this header is "X-Content-Type-Options: nosniff".
strict-transport-securityHTTP Strict Transport Security is an excellent feature to support on your site and strengthens your implementation of TLS by getting the User Agent to enforce the use of HTTPS.