LyfSkills Activity Planner

I am the founder of LyfSkills. Our free, accountless activity planner asks six short questions and suggests activity categories for children, with links to classes in India. It helps parents explore age, interests and practical preferences before trying an activity. It is general guidance, not a cli

discover.lyfskills.com security headers A+ 100/100

education · added 2026-10-09

Compare

Security headers: A+, 100 out of 100

Number 6 of 101 in the ranking. Sends all nine headers we check.

Meets the B minimum (70/100) in our RFP clause.

Sent 9

Content-Security-Policy 25 of 25

default-src 'none'; script-src 'nonce-rp3xAklvXG2LvQU9q8UiLs' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'
Strict-Transport-Security 20 of 20

max-age=31536000; includeSubDomains; preload
X-Content-Type-Options 10 of 10

nosniff
Frame protection 10 of 10

SAMEORIGIN
Referrer-Policy 10 of 10

same-origin
Permissions-Policy 10 of 10

accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*
Cross-Origin-Opener-Policy 5 of 5

same-origin
Cross-Origin-Resource-Policy 5 of 5

same-origin
No version disclosure 5 of 5

server: cloudflare

Checked 2026-10-11 at https://discover.lyfskills.com/kids-planner. Re-checked every 7 days. The grade covers the headers this website sends, not the product’s overall security. How the grade works.