A site's status, server, redirects and security headers.
Every web page returns invisible headers : the status code (200, 301, 404…), the server, cache handling, and above all the security headers (HSTS, CSP, X-Frame-Options). A good audit checks that they are present.
They are redirects. A 301 is permanent (good for SEO), a 302 is temporary.