Security Headers Checker

Check your HTTP response headers against the OWASP Secure Headers Project, including CSP, HSTS, Referrer-Policy, and Permissions-Policy.

Checks your HTTP response headers against the OWASP Secure Headers Project. Only headers that are safe for a normal public site are scored, and deprecated ones are flagged for removal.

Results

Your scan summary will appear here.

Enter a URL and run the check to see a score, findings, and fix recommendations.