What this tool checks
- HSTS, CSP, X-Frame-Options and other headers
- Simple score
- Missing header recommendations
Website Security Tools
Check important browser security headers.
Enter a public target. Checks are a point-in-time sample; private and internal addresses are blocked.
Security headers reduce clickjacking, MIME sniffing and browser-side attack risk.
Use findings as a starting point, confirm the intended configuration with your provider, and retest after a change. A successful check does not guarantee security, delivery, uptime or search rankings. Results depend on public DNS and what the server exposes at the time of the check.
Need help fixing the result?