HTTP headers

Free security headers checker

Check HSTS, CSP, X-Frame-Options, nosniff and Referrer-Policy on any website.

Free, non-invasive check in seconds. No signup.

HTTP security headers are the first defense layer of any website.

Why it matters

Missing headers are among the most common findings in penetration tests.

Configure the headers in your server, CDN or application code.

Do I need a developer?: Usually not: the report gives the exact snippet to paste.