HTTP Response Header Checker
HTTP Security Headers & Response Analyzer
Audit HSTS, CSP, X-Frame-Options, and Referrer-Policy with A+ grade cybersecurity ratings.
The grade counts six headers only. Policy values, HTTP/2 support and vulnerability protection are not verified. Cookie headers are omitted.
FAQ
Frequently Asked Questions
Questions about network tools and interpreting results.
HTTP security headers (like HSTS, Content-Security-Policy, X-Frame-Options) tell web browsers how to protect websites against Clickjacking, Cross-Site Scripting (XSS), and data injection vulnerabilities.