Free Website Tool
HTTP Security Headers Checker
Find missing browser security headers and get clear guidance for improving the response configuration.
This tool performs lightweight checks against publicly available website information. Internal/private network destinations are blocked.
What this tool checks
The results are based on externally visible information returned by the target website. They are intended to help website owners identify configuration and performance issues.
Safe external analysis
No login attempts, password guessing or exploitation are performed by this public tool.
Clear results
Findings are separated by severity and include remediation guidance where applicable.
Free to use
The public lightweight scanner does not require a paid API or subscription.
Related website tools
Website Security Scanner
Scan a website for SSL, security headers, cookies, CSP, CORS, mixed content, configuration issues and common security weaknesses.
Website Performance Test
Measure website DNS time, connection time, TLS handshake, TTFB, total response time, compression and response size.
SSL Checker
Check a website SSL certificate, validation status, expiry date, signature type and remaining certificate lifetime.
CSP Checker
Check whether a website returns a Content-Security-Policy header and identify missing CSP protection.
CORS Checker
Inspect publicly visible CORS response behavior and identify broad wildcard Access-Control-Allow-Origin configuration.
Cookie Security Checker
Check publicly returned website cookies for Secure, HttpOnly and SameSite security attributes.