Security guidance

Policy and guidance that supports website security and data protection.

Security indicators, guidance, and related standards
Indicators	Guidance	Standards
	21st Century Integrated Digital Experience Act (IDEA) Modernizes government websites and digital services.	Hypertext Transfer Protocol Secure (HTTPS) HTTP Strict Transport Security (HSTS) Page title Page description Viewport meta tag
	CISA Cybersecurity Performance Goals Voluntary, high-impact security practices.	security.txt Hypertext Transfer Protocol Secure (HTTPS) HTTP Strict Transport Security (HSTS)
	GSA Site Scanning Checks and tracks federal .gov websites.	Canonical Cumulative Layout Shift (CLS) Largest Contentful Paint (LCP) Hypertext Transfer Protocol Secure (HTTPS) HTTP Strict Transport Security (HSTS) Open Graph site name Open Graph type Open Graph title Open Graph description Open Graph URL Open Graph image Open Graph image alt Page title Page description Sitemap XML Viewport meta tag
	OWASP Top 10 Helps make websites and apps safer.	X-Content-Type-Options Clickjacking mitigation
	RFC 9116 A file format to aid in security vulnerability disclosure.	security.txt
	CISA Website Security Protect websites from cyber threats.	Content security policy (CSP) Hypertext Transfer Protocol Secure (HTTPS) HTTP Strict Transport Security (HSTS) security.txt