EdTech API Security Contract
All checks passed
Endpoint: http://localhost:8080/actuator/health
Executed at: 2026-08-23T20:57:44.576Z
Read-only edge security checks
| Check | Result | Expected | Observed |
|---|---|---|---|
| HTTP Strict Transport Security | Passed | max-age=31536000 | max-age=31536000; includeSubDomains |
| HSTS includes subdomains | Passed | includesubdomains | max-age=31536000; includeSubDomains |
| MIME sniffing protection | Passed | nosniff | nosniff |
| Clickjacking protection | Passed | deny | DENY |
| Content Security Policy frame boundary | Passed | frame-ancestors 'none' | frame-ancestors 'none' |
| Sensitive response cache protection | Passed | no-store | no-store |
| Request tracing correlation | Passed | ci-api-contract-1787518664576 | ci-api-contract-1787518664576 |