What it reads
The Permissions-Policy header.
Check 28 of 54 · Web and TLS
Switching off browser features you never use, such as the camera and microphone.
Engine 1.57.0, read 25 October 2026
Is your website set up safely?
The Permissions-Policy header.
A feature that is switched off cannot be abused by an injected script.
What it finds is shown with a recommendation. It is advice, so it never lowers your score. If the check cannot finish, it is recorded as unknown: it carries no penalty, and it is never a pass.
Presence only.
Check 28 is one of 15 in Web and TLS. See it in its row on the scanner page, beside the rest of Web and TLS.
The free check includes this one and takes about 30 seconds. No account. Nothing to install.