What is Clickjacking?
Clickjacking is an attack that loads a real website in an invisible frame on top of a decoy page, tricking visitors into clicking buttons they cannot see.
It can be used to make a logged-in user change settings, approve payments or grant permissions. The defence is to stop other sites framing your pages, with X-Frame-Options: DENY or SAMEORIGIN, or the CSP frame-ancestors directive.
Check it on your own site
Scan any domain for HTTPS/TLS, security headers, cookies, SPF and DMARC, get an A+–F grade and a PDF report with copy-paste fixes.
Run the free Website Security Audit