Free Security Headers Checker
Check HSTS, CSP, X-Frame-Options, and all critical security headers with detailed recommendations.
✓ No signup required ✓ Instant results ✓ 100% free
Why Security Headers Matter
🛡️ HSTS
Forces browsers to use HTTPS connections, preventing downgrade attacks.
🔒 CSP
Controls resource loading to prevent XSS and data injection attacks.
🖼️ X-Frame-Options
Protects against clickjacking by controlling iframe embedding.
📄 X-Content-Type-Options
Prevents MIME-type sniffing to reduce XSS risks.
🔗 Referrer-Policy
Controls how much referrer information is shared with requests.
🎯 Permissions-Policy
Controls which browser features and APIs can be used.