Security Headers Checker
// Check and analyze HTTP security headers
Controls which resources the browser can load. Mitigates XSS and data injection attacks.
Forces HTTPS connections. Prevents protocol downgrade attacks and cookie hijacking.
Prevents MIME-type sniffing. Reduces drive-by download attacks.
Controls whether the page can be embedded in iframes. Prevents clickjacking.
Legacy XSS filter for older browsers. Modern browsers rely on CSP instead.
Controls how much referrer information is shared with other sites.
Controls browser features like camera, microphone, geolocation.
Isolates browsing context. Prevents Spectre-like side-channel attacks.
Controls which origins can load your resources.
Controls embedding of cross-origin resources. Required for SharedArrayBuffer.
#About Security Headers Checker
Free online security headers checker. Analyze HTTP response headers for security best practices including CSP, HSTS, X-Frame-Options, and more. This tool runs entirely in your browser — your data is never sent to a server. Just paste your input, get instant results, and copy with one click. No sign-up or installation required.
#FAQ
Which security headers are most important? ▾
How do I get my response headers to paste here? ▾
</> Embed this tool ▾
Copy this code to embed the tool on your website. Adjust the height to fit your layout.
<iframe src="https://www.browserutils.dev/embed/security-headers-checker" width="100%" height="500" frameborder="0" title="Security Headers Checker"></iframe>