Browser tool

HTTP security header audit

Checks pasted response headers for Strict-Transport-Security, Content-Security-Policy, framing, MIME sniffing, referrer and cookie attributes, with the reason for each finding.

Runs locallyEverything you enter stays on this page. Nothing is uploaded or stored.