Security headers are used to protect the application from various attacks.

Several HTTP headers that should be present as part of the web applications server responses were found to be missing. These headers, while not exposing a huge security risk, should be set as part of a “defence in depth” strategy to protect users of the applications.