Tools Learn Login Sign up
Home Security Headers Checker

HTTP Security Headers Checker

Check if your website has the right security settings. We'll explain what each one does in plain English.

HSTS, CSP, X-Frame-Options, cookies, mixed content & more — instant, no registration.

What Are HTTP Security Headers?

Security headers are instructions your website sends to visitors' browsers. They tell the browser how to behave and what to allow, helping protect your visitors from various attacks.

Think of them as security rules that lock doors hackers might try to use. Without them, your website and visitors are more vulnerable to attacks.

Security Headers We Check

🔒
HTTPS Enforced (HSTS)
Forces all connections to use secure HTTPS
🛡️
Content Security (CSP)
Controls what content can load on your pages
🖼️
Clickjacking Protection
Prevents your site being hidden in frames
📄
MIME Type Protection
Stops browsers misinterpreting file types
🕵️
Privacy Protection
Controls what info is shared with other sites
🎛️
Feature Restrictions
Limits access to camera, mic, location

Report a bug

We're new and growing — your feedback helps us improve.

Click to upload, or paste (Ctrl+V) an image