Security Headers Checker
Check security HTTP headers like CSP, HSTS, X-Frame-Options, and more.
Security HTTP headers protect websites against common attacks like XSS, clickjacking, and MIME-type sniffing. Our security headers checker evaluates a website's implementation of CSP, HSTS, X-Frame-Options, X-Content-Type-Options, and Referrer-Policy.
FAQ
What are security headers?
Security headers are HTTP response headers that help protect against common web vulnerabilities like XSS, clickjacking, and MIME sniffing. Setting them correctly is an essential part of web security best practices.