HTTP Security Headers Analyzer

Paste your response headers and get a security grade with fixes for missing headers.

HTTP Security Headers Analyzer reviews the response headers you paste in and returns an instant security grade with practical fixes. It checks for strict transport security, content security policy, x-frame options, referrer policy, permissions policy and other hardening signals, then explains which headers are missing or weak and exactly what value to send. Use it after deploying a site or API to confirm that browsers receive the right protections, or during a security audit to prioritise remediation work. The tool scores each header, highlights risky configurations such as permissive cross origin policies, and stays completely free to use.