> For the complete documentation index, see [llms.txt](https://docs.link11.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.link11.com/using-link11/security-and-data-protection/security-of-webgui.md).

# Security of WebGUI

WebGUI plays a fundamental role in administration and daily use of every Link11 system. Therefore, it's vitally important for Link11 to ensure (and for customers to know) that this tool is secure.

To verify this, we use the Mozilla Observatory Scan.

## What is the Mozilla Observatory Scan ? <a href="#webgui-security-whatismozillaobservatoryscan" id="webgui-security-whatismozillaobservatoryscan"></a>

The Mozilla Observatory scan is an open source scanner used to help web developers, system administrators, and security professionals analyze, evaluate and improve their website by testing it against various kind of security issues (cross-site scripting attacks, man-in-the-middle attack, cookie compromise, etc.). These scans are designed to ensure that best practices are applied, and to encourage the adoption of new security technologies.

{% hint style="info" %}
**Note:**

Feel free to scan (you should!) your website too at <https://observatory.mozilla.org/analyze/>
{% endhint %}

## Link11 WebGUI Test Results <a href="#webgui-security-link11webguitestresults" id="webgui-security-link11webguitestresults"></a>

As per 05/12/2022 Link11 WebGUI has scored **A+** (the best possible grade) in the Mozilla Observatory Test (with a total score of 120/100) after applying a set of 11 different predefined security tests.

{% hint style="success" %}
**Note:**

Some tests award bonus scores, such as **+5** or **+10** points. Why? Think of it as getting extra credit for going above and beyond the call of duty in defending the website!
{% endhint %}

<figure><img src="/files/At0Kxdrj1YWh2kXlgl2c" alt=""><figcaption><p>Scan Summary</p></figcaption></figure>

<figure><img src="/files/7j8zoo681k3SNYaanVpR" alt=""><figcaption></figcaption></figure>

### Content Security Policy Test <a href="#webgui-security-contentsecuritypolicytest" id="webgui-security-contentsecuritypolicytest"></a>

<figure><img src="/files/Q2pyXrIbxC9dDntKZXAY" alt=""><figcaption><p>CSP Analysis</p></figcaption></figure>

### Cookies Test <a href="#webgui-security-cookiestest" id="webgui-security-cookiestest"></a>

<figure><img src="/files/cyG19suXnALmrZ2RzYZg" alt=""><figcaption><p>Cookies</p></figcaption></figure>
