Enter a full URL to check common security headers.
This tool fetches a URL and evaluates common HTTP security headers such as HSTS, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy.
Use it to identify missing or weak security headers that can leave a website more exposed to clickjacking, MIME sniffing, or other browser-based attacks.