⚠️ ShipLatch educational DEMO — Missing security headers (the "platform default B"). This is a fictional, deliberately-insecure teaching page run by ShipLatch. It is NOT a real app or company. No secrets here — this is the clean-but-generic case.

VulnBox Landing

Fictional, otherwise-clean app that ships without a Content-Security-Policy or HSTS header — the common platform-default grade. Scan it at shiplatch.com.