Skip to content

Free HTTP security headers checker

Security Headers Checker. What Does Your Site Tell the Browser?

A secure website is more than a valid certificate. Check the response headers your public site sends to browsers, see the protections that are present or missing, and get a short next step for each gap. No account or page content required.

We inspect the response headers only. No login, page content, or arbitrary headers are stored.

What you'll see

  • HSTS, including whether it applies to this HTTPS response.
  • Content-Security-Policy and clickjacking protection.
  • X-Content-Type-Options, Referrer-Policy, and Permissions-Policy.
  • The final URL and HTTP status after safe public redirects.
  • Concise remediation guidance for each missing protection.

Want these checks running continuously?

Skip the manual checks — SiteGuardian watches your URL around the clock and emails you the second it goes off.

Get continuous website monitoring
Check the rest of your site with a free audit →