Security header checker

Grade a site’s HTTP response headers: CSP, HSTS, cookies and more.

How to use it

  1. Copy the response headers from your browser’s developer tools or curl -I.
  2. Paste them here.
  3. Read the grade and fix the items marked “Fix” first.

Opening the tool…