Security headers checker
Inspect six common HTTP security headers and see a simple presence score.
What are security headers?
Security response headers let a site communicate browser-facing security and privacy controls. This checker looks for six widely used headers in the final HTTP response.
Why check security headers?
Header checks can quickly reveal whether important browser controls are present on a page or across a small URL set. Presence alone does not prove a configuration is correct, so treat the score as an audit signal rather than a complete security assessment.
How it works
The Worker validates each public URL, follows redirects safely, reads only the response headers, and reports whether each of six target headers is present. Header values are shown exactly as returned.
Frequently asked questions
Which security headers are checked?
The tool checks Content-Security-Policy, Strict-Transport-Security, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, and Permissions-Policy.
How is the score calculated?
The score is the number of the six checked headers that are present in the final HTTP response.
Does the checker read the page body?
No. It only needs response headers and cancels the response body stream after the headers are received.