Security Headers Checker
About Security Headers
HTTP security headers are a fundamental part of website security. They help protect against common attacks such as cross-site scripting (XSS), clickjacking, and man-in-the-middle attacks.
Headers We Check
Content-Security-Policy
Controls which resources the browser is allowed to load.
Strict-Transport-Security
Forces browsers to use HTTPS connections only.
X-Frame-Options
Prevents clickjacking by controlling iframe embedding.
X-Content-Type-Options
Prevents MIME type sniffing attacks.
Referrer-Policy
Controls how much referrer information is shared.
Permissions-Policy
Controls which browser features can be used.