Frame Security Policy
Frame security controls whether your page can be embedded in iframes on other sites, protecting against clickjacking attacks.
Why It Matters
Clickjacking tricks users into clicking hidden elements by overlaying your page in a transparent iframe. Attackers can use this to steal clicks, credentials, or perform unauthorized actions.
How We Check
We check for X-Frame-Options header (DENY or SAMEORIGIN) and CSP frame-ancestors directive. We recommend using both for maximum browser compatibility.
How to Fix
Add X-Frame-Options: DENY (or SAMEORIGIN if embedding is needed) and CSP frame-ancestors 'none' or frame-ancestors 'self'.
Related Security Checks
Related Tool
Security Headers Checker
Run all 10 related checks with our free security headers checker
Check Your Website Now
Run a free security scan to check for Frame Security Policy issues and 58+ other security vulnerabilities.
Scan Your Website Free