🛡H
Security Headers Checker
Paste HTTP response headers and get a graded security review.
C
Grade
4 / 8
Score
| Header | Finding | |
|---|---|---|
| Strict-Transport-Security | ✓ | present |
| Content-Security-Policy | ✗ | missing – no protection against injected scripts |
| X-Content-Type-Options | ✓ | nosniff |
| X-Frame-Options / frame-ancestors | ✗ | missing – page can be framed (clickjacking) |
| Referrer-Policy | ✓ | present |
| Permissions-Policy | ⚠ | missing (optional, limits camera, mic, geolocation …) |
| Server | ⚠ | reveals software version |
| Set-Cookie session | ⚠ | missing: Secure, SameSite |
Runs entirely in your browser. Nothing is sent anywhere.
How it works
- 1Paste or type your text.
- 2Choose the options you need.
- 3Copy or download the result.
About this tool
Security Headers Checker: Paste HTTP response headers and get a graded security review. Paste your text and the result appears immediately, ready to copy or download. Everything happens locally in your browser — nothing you paste is uploaded or stored.
How do I use the Security Headers Checker?
Paste or type your text. Choose the options you need. Copy or download the result.
Is the Security Headers Checker free?
Yes. It is completely free with no sign-up, no usage limits and no watermark.
Is my data sent to a server?
No. Everything is calculated locally in your browser. Nothing you enter is uploaded, logged or stored.
Does it work on my phone?
Yes. It works in any modern browser on Android, iPhone, iPad, Windows, Mac and Linux — no app needed.