small-business websites

A new audit of 4,688 small-business websites found that 49.7% met none of seven common security header criteria. The figures suggest many small firms are leaving basic browser-level protections, such as those guarding against clickjacking and script injection, unconfigured, exposing customers to avoidable risks. The scale of the sample has drawn attention to how far behind small businesses lag on web security basics compared with larger organisations.