secgatesScan website
All scanners
ConfigurationPlanned public-safe

Fetch Metadata Isolation Scanner

Safe-mode check for whether sensitive routes can reject suspicious cross-site requests using Sec-Fetch browser signals.

This public-safe scanner page explains the risk area. Runtime coverage is not included in the first scan yet, and domain verification is only needed for deeper checks.

Brief

Fetch Metadata Isolation Scanner checks whether browser, server, or platform settings are doing their protective job.

Scanner scope

Reviews the public configuration signals behind this area: Safe-mode check for whether sensitive routes can reject suspicious cross-site requests using Sec-Fetch browser signals.

Why it matters

Most launch issues come from one loose setting. Clear configuration checks make hidden risk visible before customers do.

Common issues

Missing protective setting
Weak default left in place
Configuration drift between environments

Scan your website for this risk

Login first, run a preview scan, and see the issue count. Subscribe to reveal the exact findings and AI fixes.

Scan website