Network
HTTP Headers
Analyze HTTP response headers and security score. Check for security headers like CSP, HSTS, X-Frame-Options.
How it works
An HTTP headers analyzer that fetches and displays all response headers from any URL, with a special focus on security headers.
Shows every response header in an organized table with names and values. Automatically analyzes security-related headers and calculates a security score out of 5.
Checks for presence of: X-Frame-Options (prevents clickjacking), X-XSS-Protection (XSS filtering), Content-Security-Policy (prevents XSS/injection), HSTS (forces HTTPS), and X-Content-Type-Options (prevents MIME sniffing).
Green highlighting indicates security headers are present and properly configured. Red highlighting shows missing security headers with recommendations for improvement.
Essential for security audits, penetration testing, and ensuring websites follow security best practices.