Enter a URL to check its HSTS headers.
Check HTTP Strict Transport Security headers.
HSTS Checker tests if a website has HTTP Strict Transport Security enabled. See also: security-headers-checker or cors-checker.
To use HSTS Checker, first enter the full URL including https://. Then, click Check HSTS to fetch and inspect headers. After that, review the max-age strength and directive flags. The result appears instantly in your browser.
HSTS Checker tests if a website has HTTP Strict Transport Security enabled. It runs entirely in your browser, with no sign-up and no file uploads.
First, enter the full URL including https://. Then, click Check HSTS to fetch and inspect headers. Review the max-age strength and directive flags.
Yes - HSTS Checker is completely free and requires no account. Everything runs locally in your browser, so your lookups and generated credentials never leave your device.