This site is free. Some outbound links — for example to hosting, CDN, or security-scanning providers — may be affiliate links: if you sign up through them we may earn a commission at no extra cost to you. A commission never changes what we recommend.
The servers and specs these recipes cover are free and open, so most references here are plain references, not paid placements.
No warranty. Recipes are provided as-is. A wrong CSP or HSTS value can break a site — roll out CSP in report-only mode first and test on staging before production.