Security headers checker
Fetches a page and checks for the response headers that harden a site against common attacks.
What is Security headers checker?
A handful of response headers — HSTS, Content-Security-Policy, X-Frame-Options, and others — meaningfully harden a site against common attacks like clickjacking and content-type sniffing, and their presence is a quick signal of how security-conscious a site's configuration is.
How to use it
Enter a URL; the tool fetches it and checks for six key security headers, showing which are present and explaining what each one protects against.
Example
A well-configured site might show 5/6 headers present, missing only Permissions-Policy.