• HSTS header missing
  • HSTS max-age too low
  • HSTS max-age flag missing
  • HSTS includeSubdomains flag missing
  • HSTS preload flag missing