HTTP Strict Transport Security (HSTS) header's max-age value is lower than the recommended value.
It is recommended to set the max-age to a big value like 31536000 (12 months) or 63072000 (24 months).
You can search and find all vulnerabilities
Strengthening enterprise application security: Invicti acquires Kondukto
Modern AppSec KPIs: Moving from scan counts to real risk reduction
Friends don’t let friends shift left: Shift smarter with DAST-first AppSec
Vibe talking: Dan Murphy on the promises, pitfalls, and insecurities of vibe coding