Few good links for securing your asp.net mvc site
- After applying SecurityHeaders validate
- Content-security-policy-for-asp-net-mvc
- Improving security in ASP.NET MVC using custom headers
- Content-Security-Policy in ASP.NET MVC
- Adding HTTP Headers to Improve Security
