Security Headers Checker
Audit HSTS, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy and Permissions-Policy, then score the result from A+ to F with specific fixes.
About the Security Headers Checker
Audit HSTS, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy and Permissions-Policy, then score the result from A+ to F with specific fixes.
Queries run from our global edge network, so you see what a neutral observer on the public internet sees — not what your local network or ISP resolver happens to have cached.
Frequently asked questions
What does the Security Headers Checker do?
Audit HSTS, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy and Permissions-Policy, then score the result from A+ to F with specific fixes.
Is the Security Headers Checker free to use?
Yes. The Security Headers Checker is completely free with no account, no signup and no usage limits for normal use.
Do you log the lookups I run?
No. Queries are processed at the edge and returned straight to you. We do not retain, profile or sell your lookup history.