HTTP HEADER ANALYZER
Audit HTTP security headers — detect missing protections and calculate your security grade.
$
ABOUT HTTP SECURITY HEADERS
HTTP security headers instruct browsers how to handle website content securely. They protect against cross-site scripting (XSS), clickjacking, content injection, and other common web attacks. Missing critical headers leave your site vulnerable even when application code is secure.
What are HTTP security headers?
HTTP security headers are special response headers used by web servers to instruct browsers how to securely handle website content. These headers protect users from attacks such as cross-site scripting (XSS), clickjacking, and content injection.
Important security headers
- Content-Security-Policy (CSP)
- Strict-Transport-Security (HSTS)
- X-Frame-Options
- X-Content-Type-Options
- Referrer-Policy