Security Headers Checker
Analyze your website's security headers instantly. Get a security score, detailed analysis, and ready-to-use code snippets to fix any issues.
Enter Your URL
Type your website URL (e.g., https://example.com) and click Check
We Analyze Headers
We check 7 critical security headers and their configuration
Get Fix Code
Get ready-to-use code snippets for Apache, Nginx, PHP, or Node.js
What Do We Check?
Content-Security-Policy
25 points
Controls which resources the browser can load, preventing XSS attacks.
Strict-Transport-Security
20 points
Forces browsers to use HTTPS, preventing man-in-the-middle attacks.
X-Frame-Options
15 points
Prevents clickjacking by controlling if the page can be embedded.
X-Content-Type-Options
15 points
Referrer-Policy
10 points
Permissions-Policy
10 points
X-XSS-Protection
5 points