• HSTS header missing
• HSTS max-age too low
• HSTS max-age flag missing
• HSTS includeSubdomains flag missing
• HSTS preload flag missing