Security headers are directives used by web applications to configure security defenses.