Security Headers Checker
Check a live site's security-related HTTP headers.
Checking a live site's response headers requires a server-side fetch — browsers block cross-origin header inspection of arbitrary sites via CORS. This tool isn't available yet. In the meantime, paste headers you already have into the HTTP Headers Analyzer.
This tool is coming soon
Checking a live site's response headers requires a server-side fetch — browsers block cross-origin header inspection of arbitrary sites via CORS. This tool isn't available yet. In the meantime, paste headers you already have into the HTTP Headers Analyzer.
- Free — no signup, no account, no watermark
- Works on mobile, tablet and desktop
- Instant — results appear as soon as you enter your input
Overview
Would fetch a live URL and report which security headers (CSP, HSTS, X-Frame-Options and others) it sends.
How to use it
- 1This tool is not yet available. See the note above for why — in the meantime, use the HTTP Headers Analyzer with headers you've copied from your browser's network tab.
Related tools
All security toolsReady to use Security Headers Checker?
Security Headers Checker