Preparing your workspace
Connecting MemonaIQ servicesPreparing your workspace
Connecting MemonaIQ servicesDefend public endpoints using TLS handshakes, CORS policies, secure sessions, and vulnerability audits.
Understand certificate validity, hostname coverage, chains, expiry, and common HTTPS failures.
Understand what a useful trust score can signal, what it cannot prove, and how to review the evidence.
Understand HSTS max-age duration, includeSubDomains protection, and browser preload list requirements.
Demystify browser sandbox safety: the Same-Origin Policy (SOP) and Cross-Origin Resource Sharing (CORS).
Deconstruct Zero-Trust networking: "never trust, always verify" across systems and users.
Learn how modern HTTP response headers defend browsers against XSS, clickjacking, MIME-sniffing, and data leakage.
Configure robust browser cookie security attributes to protect session credentials from theft and CSRF attacks.
Understand how Model Context Protocol exposes host capabilities, evaluates permissions, and enforces developer guardrails.
Discover why readOnlyHint and tool descriptions in MCP cannot be treated as verified security proof.
Learn the core concepts, risks, and mitigation strategies for major web vulnerabilities.
Master CSP directives, strict nonce-based policies, hash allowlists, and report-only monitoring strategies.
Learn how the MCP 2026-07-28 specification hardens authorization, mandates resource indicators, and prevents token confusion attacks.
Test and inspect TLS & Web Security configurations in real time with zero setup.
Inspect SSL/TLS certificate chains, expiration dates, and security header configurations.
Compare CORS-enabled API responses and JSON response structures locally.
Scan frontend and server code for insecure Access-Control-Allow-Origin: * patterns.
