Six response headers every browser and security scanner checks for. They are set once at the server and cost nothing to add. Anyone can verify this list in about ten seconds with curl.
This site could not be reached when we ran the check, so its headers were not measured. It is not recorded as failing.
Full audit not available yet, but we are working on it. We add performance, SEO and accessibility in batches, because unlike the free header check they draw on a metered quota, so they fill in over time. The header result above is complete on its own.
We measure a public website only. This says nothing about how PNC handles data internally, and nothing here is a statement about any incident. Headers were read with a single request following redirects on July 23, 2026.