Server-side diagnostic
HTTP Security Headers Checker
Inspect key HTTP security response headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy) with explanations and scope limits.
Scope notice: Inspects HTTP response headers only; this is not a full malware or vulnerability scan.
How It Works
Enter a public HTTPS/HTTP URL to evaluate present and missing defensive headers. Note: this is a header inspection, not a full malware or vulnerability scan.
Frequently Asked Questions
- Is this a complete vulnerability scan?
- No. It inspects HTTP response headers only and does not scan application code, TLS ciphers, or malware.
