Across our 434 enterprise agency benchmark, 78.8% of domains lacked Content-Security-Policy and 54.6% lacked HSTS. Generate non-breaking rules for your stack below.