Six response headers every browser and security scanner checks for. They are set once at the server and cost nothing to add. Anyone can verify this list in about ten seconds with curl.
This site could not be reached when we ran the check, so its headers were not measured. It is not recorded as failing.
Not yet measured for this site. We add these in batches, because unlike the header check they draw on a metered quota. The header result above is complete on its own.
We measure a public website only. This says nothing about how Adobe handles data internally, and nothing here is a statement about any incident. Headers were read with a single request following redirects on July 19, 2026.