HTTP Security Headers Auditor
Check a website's HTTP security headers including CSP, HSTS, X-Frame-Options, and more. Get a security grade from A to F.
HTTP Security Headers Assessment
HTTP security headers protect web applications from common attacks including XSS, clickjacking, MIME sniffing, and protocol downgrade. This auditor checks for Content-Security-Policy, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, and more, then calculates an overall security grade.