Check 28 of 54 · Web and TLS

Permissions-Policy, explained.

Switching off browser features you never use, such as the camera and microphone.

Engine 1.57.0, read 25 October 2026

Free checkAdviceReliability: Definitive

Is your website set up safely?

What the check does, and where it stops.

What it reads

The Permissions-Policy header.

Why it matters

A feature that is switched off cannot be abused by an injected script.

What a finding looks like

What it finds is shown with a recommendation. It is advice, so it never lowers your score. If the check cannot finish, it is recorded as unknown: it carries no penalty, and it is never a pass.

Where its limits are

Presence only.

ReliabilityDefinitive: reads a published value

Check 28 is one of 15 in Web and TLS. See it in its row on the scanner page, beside the rest of Web and TLS.

See how your domain does.

The free check includes this one and takes about 30 seconds. No account. Nothing to install.