Aller au contenu principal
← All guides

Tech stack: what your infrastructure gives away

HTTP protocol, compression, caching, CDN, library versions — the layer nobody sees, and which constrains everything above it.

Weight in the score
6/100
checks in this category
20

Why it matters

Serving over HTTP/1.1 without compression undoes part of the optimisation work done higher up. A JavaScript library with a publicly documented flaw is exploitable by anyone who can read a security advisory. These are fixed at the server or build level, once, for every page.

The checks that run

The list below is the audit's own, generated from its catalogue — it follows the product rather than describing it from memory.

  • No end-of-life AngularJS (1.x) detected
  • No deprecated web APIs used
  • No source maps exposed in production
  • No end-of-life (EOL) technology detected
  • Bootstrap up-to-date (4+) if used
  • CMS detected up-to-date (if applicable)
  • Gzip/Brotli compression active
  • Appropriate caching headers
  • Vary header present if compression active
  • X-Powered-By header hidden
  • HSTS with preload directive
  • Server information detected without major risk
  • jQuery up-to-date (3.5+) if used
  • Analytics tools detected compliant
  • Monitoring tools detected without data leaks
  • Technical stack successfully detected
  • Database technology not dangerously exposed
  • Single Google Tag Manager container
  • Single major JS framework loaded
  • Technology versions not exposed

Check your site against these

A free scan runs these checks and those of the other 10 categories, and returns the detail of every failure with its fix.

Scan my site for free

Other categories