Defense in depth
Security header checker
An HTTP header checker for teams reviewing browser protections and transport security.
Configure your assessment
Inspect real response headers and get practical configuration recommendations.
Assessment scope
- Inspect CSP, HSTS, MIME sniffing and framing protection.
- Check referrer policy and server disclosure.
- Header presence alone does not guarantee security.
- Reports include actual observed header values.
A focused first pass
Fix high-impact findings first. Re-test after changes and combine automated checks with a manual security review.
Explore scan reports