Security headers checker

HTTP response headers are the cheapest security controls you will ever deploy — and most sites are missing several. Enter a domain to see which, why each one matters, and exactly what to set.

Passive checks only — nothing is scanned, attacked, or stored.