Security Header Analyzer

Checks six common security response headers.

Reading the result

HSTS and a real Content-Security-Policy deliver the most value.

Limitations

Presence does not prove a policy is well configured.

Need more than a single check? Request a technical audit.