Amazon Cognito
Amazon Cognito is AWS's managed identity service, providing user pools for sign-in and user directories, identity pools for AWS credential exchange, and federation with SAML and OIDC providers.
Usage-based on monthly active users across three feature plans (Lite, Essentials, Plus), with federated SAML and OIDC users billed at a separate lower rate, and a permanent free tier for both categories.
Proprietary
Appears in 1 guide
Where it ranks
Guides that include Amazon Cognito.
Security headers
What Amazon Cognito's website sends to your browser.
Scanned 2026-08-25. Grade headers D, scoring 45 out of 100.
−
No Content-Security-Policy, so no defence in depth against cross-site scripting
+
Strict-Transport-Security is set
+
X-Content-Type-Options: nosniff is set
+
X-Frame-Options is set
−
No Referrer-Policy, so full URLs may leak to third parties
−
No Permissions-Policy, so powerful browser features are not restricted
−
No Cross-Origin-Opener-Policy
−
No Cross-Origin-Resource-Policy
+
No server-version or X-Powered-By disclosure
This is one narrow, automated check of the HTTP response headers on the vendor's own website. It says nothing about how the product itself is built, how it stores your data, or whether it has ever been audited. A good grade here is a small signal that somebody was paying attention.