# kakuro-puzzle.online Website Report

- Final URL: https://kakuro-puzzle.online/
- Scanned at: 2026-07-12T03:39:51.752Z
- Themerella Score: 86/100
- Technologies detected: 6
- Total issues: 6

## Top Fixes
1. [P1] Missing HSTS header (Security, high, security.missing_hsts_header)
   - Add Strict-Transport-Security after confirming the full site works over HTTPS.
   - Fix guide: https://themerella.com/fix/missing-hsts-header/
2. [P1] Missing Content-Security-Policy header (Security, high, security.missing_csp_header)
   - Add a CSP header at the CDN or server layer and test third-party scripts.
   - Fix guide: https://themerella.com/fix/missing-csp-header/
3. [P1] Missing X-Frame-Options header (Security, medium, security.missing_x_frame_options_header)
   - Add X-Frame-Options: SAMEORIGIN or use frame-ancestors in CSP.
   - Fix guide: https://themerella.com/fix/missing-x-frame-options/
4. [P2] Missing X-Content-Type-Options header (Security, medium, security.missing_x_content_type_options_header)
   - Add X-Content-Type-Options: nosniff.
5. [P2] Missing Referrer-Policy header (Security, low, security.missing_referrer_policy_header)
   - Add Referrer-Policy: strict-origin-when-cross-origin.
   - Fix guide: https://themerella.com/fix/missing-referrer-policy/
6. [P2] Missing Permissions-Policy header (Security, low, security.missing_permissions_policy_header)
   - Restrict browser features that the site does not use.

## Technologies
- Google Analytics 4 (Analytics, confidence: high)
  - Evidence [html]: g-kakuro
- WordPress (CMS, confidence: high)
  - Evidence [html]: wp-content
  - Evidence [resources]: /wp-content/
- Tailwind CSS (CSS / UI, confidence: low)
  - Evidence [html]: class="mode-card-grid
- Next.js (Frontend Framework, confidence: high)
  - Evidence [html]: /_next/static
  - Evidence [resources]: /_next/static
  - Evidence [headers]: next-router
- Cloudflare (Hosting / CDN, confidence: high)
  - Evidence [headers]: cf-cache-status
  - Evidence [resources]: cloudflareinsights.com
- Divi (WordPress Theme / Builder, confidence: medium)
  - Evidence [html]: divi

## WordPress
- Detected: yes
- Theme: not exposed
- Plugins: none detected
- Legacy signals: none detected

## All Issues
- Missing HSTS header (Security, high, security.missing_hsts_header)
  - Detail: HSTS was not found in the response headers.
  - Fix: Add Strict-Transport-Security after confirming the full site works over HTTPS.
  - Fix guide: https://themerella.com/fix/missing-hsts-header/
- Missing Content-Security-Policy header (Security, high, security.missing_csp_header)
  - Detail: Content-Security-Policy was not found in the response headers.
  - Fix: Add a CSP header at the CDN or server layer and test third-party scripts.
  - Fix guide: https://themerella.com/fix/missing-csp-header/
- Missing X-Frame-Options header (Security, medium, security.missing_x_frame_options_header)
  - Detail: X-Frame-Options was not found in the response headers.
  - Fix: Add X-Frame-Options: SAMEORIGIN or use frame-ancestors in CSP.
  - Fix guide: https://themerella.com/fix/missing-x-frame-options/
- Missing X-Content-Type-Options header (Security, medium, security.missing_x_content_type_options_header)
  - Detail: X-Content-Type-Options was not found in the response headers.
  - Fix: Add X-Content-Type-Options: nosniff.
- Missing Referrer-Policy header (Security, low, security.missing_referrer_policy_header)
  - Detail: Referrer-Policy was not found in the response headers.
  - Fix: Add Referrer-Policy: strict-origin-when-cross-origin.
  - Fix guide: https://themerella.com/fix/missing-referrer-policy/
- Missing Permissions-Policy header (Security, low, security.missing_permissions_policy_header)
  - Detail: Permissions-Policy was not found in the response headers.
  - Fix: Restrict browser features that the site does not use.

Generated by Themerella Website Scanner.