IcyZip
Pairs two browsers by QR code or link to move live text or one file without an account or app install. Text and file bytes are encrypted in the browser before ciphertext relay; connection and file metadata remain visible to the service.
Compare
Security headers: A+, 95 out of 100
Number 6 of 95 in the ranking. Missing 1 of the 9 headers we check.
Meets the B minimum (70/100) in our RFP clause.
Missing 1
-
No version disclosure 0 of 5
Keeps the Server and X-Powered-By headers from announcing exact software versions.
Without it: A header like "nginx/1.18.0" or "PHP/7.4" tells an attacker which known vulnerabilities to try, and flags possibly unpatched software to every automated scanner on the internet.
Sent 8
-
Content-Security-Policy 25 of 25
font-src 'self'; base-uri 'none'; frame-ancestors 'none'
-
Strict-Transport-Security 20 of 20
max-age=86400
-
X-Content-Type-Options 10 of 10
nosniff
-
Frame protection 10 of 10
DENY
-
Referrer-Policy 10 of 10
same-origin
-
Permissions-Policy 10 of 10
camera=(self), clipboard-read=(self), clipboard-write=(self), fullscreen=(self), microphone=(), geolocation=(), payment=(), usb=()
-
Cross-Origin-Opener-Policy 5 of 5
same-origin
-
Cross-Origin-Resource-Policy 5 of 5
same-origin