SSL and website security header checker
Security headers tell browsers how to handle important risks such as transport security, framing, content sources and referrer information. This tool reviews public response headers only; it is not a penetration test or a guarantee that a site is secure.
Missing headers do not automatically mean a site has been compromised, and blindly adding restrictive policies can break applications. Use the report as a configuration review and test changes in a staging environment before enforcing them on production traffic.
How to use it
- Enter a public HTTPS website URL.
- Review the security score and individual header checks.
- Read the recommendations for missing or weak controls.
- Test configuration changes before deploying them to production.