Use predefined server settings to ensure your site is secure by default.
As a static site, Hinode is secure by design. Unlike dynamic sites, Hinode does not use databases or application servers to serve its content. This greatly reduces the risk associated with hosting public sites. In addition, Hinode uses rather strict security policies by default. This results in an A+ score from Mozilla Observatory.
Check the content security policy