This guide provides insight into ‘Security Headers’ and their effectiveness, so that owners and administrators of web applications in education can apply them according to their own insight and situation. The aim is to improve the security and reliability of web applications in education.

‘Security Headers’ do not (yet) fall under the Digital Government Act (WDO), but they are important for the security of web applications, such as a website. Looking at internet.nl, which provides insight into the implementation of WDO standards, some Security Headers are included in the test. If ‘Security Headers’ are not applied, this can lead to vulnerabilities in the web application.