Security Headers

See how well a website is configured for security.
Enter any URL to scan its HTTP headers.

This tool checks for common security headers. A low score doesn't mean a site is insecure, but good headers are an important layer of defense.

Why security headers matter

Defense in depth

Security headers add extra protection even when other defenses fail. They tell browsers how to behave when loading your site.

Easy wins

Most headers take minutes to configure but provide lasting protection. They're one of the highest-ROI security improvements.

What we check

  • HSTS (HTTPS enforcement)
  • Content-Security-Policy
  • X-Content-Type-Options
  • X-Frame-Options
  • Referrer-Policy
  • Permissions-Policy

Want a comprehensive security audit for your website or business?

Let's talk
← Back to all tools