> HSTS is the HTTP Strict Transport Security standard that forces HTTPS connections: what the header does on your site and why it needs no consent. > > Canonical: https://www.flowconsent.com/en/services/security/hsts Security # HSTS Essential · [Official website](https://www.rfc-editor.org/rfc/rfc6797#section-6.1) HSTS (HTTP Strict Transport Security) is a web security standard defined in RFC 6797, not a third-party service. A site sends the Strict-Transport-Security header to tell browsers to connect only over HTTPS for a set period, which protects visitors against downgrade attacks and cookie hijacking. It sets no cookies and shares no data, so it needs no consent. [Block HSTS until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=security) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Security](https://www.flowconsent.com/en/services/security) - Consent Essential - Prior consent Required - Documented cookies 0 Compliance ## HSTS and the GDPR HSTS is classified as “Essential”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. Cookies and trackers ## What HSTS sets and contacts The cookies of HSTS are not documented in the catalog yet. To see what is actually set on your site, run a free scan. [Scan my site](https://www.flowconsent.com/en/scan) Same category ## More services: Security [See the whole category](https://www.flowconsent.com/en/services/security) ### [ipify](https://www.flowconsent.com/en/services/security/ipify) [ipify is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. ipify supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, ipify ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/security/ipify) [Essential](https://www.flowconsent.com/en/services/security/ipify) · ### [IPinfo](https://www.flowconsent.com/en/services/security/ipinfo) [IPinfo is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. IPinfo integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, IPinfo helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/security/ipinfo) [Essential](https://www.flowconsent.com/en/services/security/ipinfo) · ### [Anura](https://www.flowconsent.com/en/services/security/anura) [Anura is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Anura enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Anura empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/security/anura) [Marketing](https://www.flowconsent.com/en/services/security/anura) · ### [Auth0](https://www.flowconsent.com/en/services/security/auth0) [Auth0 is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Auth0 offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Auth0 empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/security/auth0) [Essential](https://www.flowconsent.com/en/services/security/auth0) · ### [Radar](https://www.flowconsent.com/en/services/security/radar) [Radar is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Radar integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Radar helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/security/radar) [Essential](https://www.flowconsent.com/en/services/security/radar) · ### [Auth0 Lock](https://www.flowconsent.com/en/services/security/auth0-lock) [Auth0 Lock is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Auth0 Lock offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Auth0 Lock empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/security/auth0-lock) [Essential](https://www.flowconsent.com/en/services/security/auth0-lock) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)