// Continuous Monitoring Dashboard
Security Space
Logged in as : visiteur@webguardian.cloud GUEST PROFIL: VISITOR
Current Subscription
Demonstration Mode
Explore WebGuardian capabilities. Activate a plan to monitor your own websites.
Monitoring Quota
1 / 1 monitored
1 demonstration domain displayed. Activate a plan to monitor your own domains.
Active Demonstration • Protected Official Domain
Live Demonstration Domain
This field is fixed to official reference domain webguardian.cloud (read-only anti-abuse). To place your own website under 24/7 continuous monitoring and generate diagnostic reports, choose your plan below.
Automated hourly probe
Instant email alert on score regression
TLS 1.3 & 8 OWASP HTTP headers analysis
Your Monitored Domains
Overall Grade
A+
100/100
High SecOps Compliance
Weighting ?
TLS Encryption
TLS 1.3
Valid certificate • HSTS active
Security Headers
8 / 8
compliant
CSP Strict • HSTS • Anti-Sniff
100% protected
Automated Probe
Live 24/7
180 ms
Frequency: every 60 min
Temporal Telemetry // Probes History
SecOps Posture Evolution & Regression Detection
A+
webguardian.cloud
Active 24/7 Monitoring
HTTP Headers
8 Protected
TLS Protocol
TLS 1.3 (HTTPS)
Cookies & Session
SameSite Strict
Incident Alerts
Email active
OWASP 8 HTTP Headers Control Matrix
Headers score: 100 / 100 pts
Critical
Content-Security-Policy (CSP)
COMPLIANT (+22 pts)
content-security-policy
SecOps Recommendation:
default-src 'self' (Blocks XSS script injections)
Critical
Strict-Transport-Security (HSTS)
COMPLIANT (+20 pts)
strict-transport-security
SecOps Recommendation:
max-age=31536000; includeSubDomains (Enforces permanent HTTPS)
High
X-Frame-Options
COMPLIANT (+13 pts)
x-frame-options
SecOps Recommendation:
SAMEORIGIN or DENY (Neutralizes clickjacking)
High
X-Content-Type-Options
COMPLIANT (+13 pts)
x-content-type-options
SecOps Recommendation:
nosniff (Blocks execution of disguised MIME uploads)
Medium
Referrer-Policy
COMPLIANT (+10 pts)
referrer-policy
SecOps Recommendation:
strict-origin-when-cross-origin (Protects sensitive query params)
Medium
Permissions-Policy
COMPLIANT (+10 pts)
permissions-policy
SecOps Recommendation:
camera=(), microphone=(), geolocation=() (Restricts sensitive browser APIs)
Medium
Cross-Origin-Opener-Policy (COOP)
COMPLIANT (+9 pts)
cross-origin-opener-policy
SecOps Recommendation:
same-origin (Isolates browsing context from external tabs)
Low
Cross-Origin-Embedder-Policy (COEP)
COMPLIANT (+3 pts)
cross-origin-embedder-policy
SecOps Recommendation:
require-corp (Strict control of loaded subresources)
Detailed TLS & Modern Cryptography Audit
Encryption Status: TLS 1.3 Strict
Negotiated Protocol
TLSv1.3
Cutting-edge protocol active. Deprecated versions (SSLv3, TLS 1.0, TLS 1.1) are strictly rejected.
Cipher Suite
PFS / AEAD
TLS_AES_256_GCM_SHA384 / ChaCha20-Poly1305
Perfect Forward Secrecy guaranteed via ECDHE key exchange.
SSL Certificate & Issuer
Valid & Trusted
Secured X.509 certificate issued by a trusted public CA. Auto-renewal within 80 days and NIST cryptographic agility compliant.
HTTPS Redirection & HSTS
HSTS Preload
Systematic 301 redirect with Strict-Transport-Security header enforced.
Cookies & Session Security Audit
Cookies Status: 0 Vulnérabilité
Secure Flag
CONFORME
All session cookies travel exclusively over encrypted HTTPS channels.
HttpOnly Flag (Anti-XSS)
CONFORME
Session cookies are fully shielded from JavaScript execution, blocking session theft.
SameSite Strict Attribute
STRICT
Maximum cross-site isolation preventing unauthorized CSRF request execution.
__Host- Secure Prefix
RECOMMANDÉ
Usage of
__Host-wg_sess preventing subdomain hijacking or cookie tossing. Active Monitoring & Instant Alert Channels
Cadence: H24 / 60 min
Continuous Scheduled Probe
ACTIVE
A complete automated audit runs hourly (60-minute cadence) verifying TLS, headers, and cookies.
Regression Notifications
ENABLED
Immediate high-priority email alert triggered upon security score regression or header removal.
Webhook Integrations
Slack / Teams / Generic
HMAC-SHA256 signed JSON payloads dispatchable to SecOps, Discord, Slack or SIEM.
SecOps Supervisor
Xavier Maillard
Technical supervision operated by Xavier Maillard (Mx Solutions). Sovereign European infrastructure.
Protected demo