HTTP Scanner

What does the security headers checker do?

HTTP security headers tell browsers how to handle your website and which potentially dangerous behaviors to restrict. A missing or weak header can leave users more exposed to attacks such as clickjacking, content injection or insecure transport.The scanner requests the public URL you provide, reads its HTTP response headers and evaluates the detected security controls.

Which security headers are checked?

The scan covers the following HTTP security headers. Some are recommended broadly, while others only apply to particular applications or response types.HTTPS and transport securityStrict-Transport-Security helps browsers use encrypted HTTPS connections instead of falling back to insecure HTTP.Strict-Transport-SecurityContent and browser protectionsThese headers restrict which resources can run, how the page may be.

How to check your website’s security headers?

Step 1Enter a public website URLProvide the HTTPS or HTTP address you want to inspect.Step 2Run the security headers scanThe scanner retrieves the response and analyzes the supported headers and their values.Step 3Review the actionable reportSee which protections passed, which require attention and how the configuration can be improved.

How to interpret the scan results?

The report separates correctly detected protections from headers that are missing, weak or require review. It may also identify response headers that reveal unnecessary information about the server or application.A strong result means that the analyzed response has a solid browser-facing security configuration. It does not prove that the website is free from vulnerabilities.