Enter a URL to check its security headers.
Check HTTP security headers including HSTS, CSP, X-Frame-Options and more.
Security Headers Checker tests websites for security header configuration. See also: cors-checker or hsts-checker.
To use Security Headers Checker, first enter the full URL of the website to check. Then, click "Check Security Headers". After that, review which headers are present, missing, or misconfigured. The result appears instantly in your browser.
Security Headers Checker tests websites for security header configuration. It runs entirely in your browser, with no sign-up and no file uploads.
First, enter the full URL of the website to check. Then, click "Check Security Headers". Review which headers are present, missing, or misconfigured.
Yes - Security Headers Checker is completely free and requires no account. Everything runs locally in your browser, so your lookups and generated credentials never leave your device.