Skip to content
Explore Tools

Website Tools

Security Headers Checker

Check whether a website uses important headers such as HSTS, CSP, X-Frame-Options and more.

Security Headers Checker

Simple controlsEverything you need for the task.
Clear resultsReview your output before using it.
No signupGet started without an account.

How it works

1. Add the Required Input

The public URL, domain, IP address, record type, or audit option requested by the checker.

2. Review Security Headers Checker Options

Choose only the settings that apply to the result you need; leave optional controls unchanged when you are unsure.

3. Run a Fresh Check

Start the task and wait for the interface to return its result or a clear setup message.

4. Verify Before You Use It

Results can vary by location, cache, DNS propagation and temporary server conditions. Confirm important findings with the relevant host or service.

Related Website Tools

View All Website Tools →
No API

Mixed Content Checker

Find insecure HTTP assets on HTTPS pages.

Check
Recommended

All-in-One Website Health Checker

Audit uptime, SSL, redirects, headers, SEO and page health.

Run Audit
Popular

DNS Propagation Checker

Compare DNS records across trusted public resolvers.

Check DNS

IP Blacklist Checker

Check whether an IP appears on common DNS blacklists.

Check IP

SPF Record Checker

Find and validate a domain SPF email policy.

Check SPF

Frequently Asked Questions

The public URL, domain, IP address, record type, or audit option requested by the checker. Start with a representative input and use only the options needed for your intended result.

A point-in-time observation from the public target and the checks available on this page. Treat the output as a current diagnostic snapshot rather than a permanent guarantee.

Results can vary by location, cache, DNS propagation and temporary server conditions. Confirm important findings with the relevant host or service.

The checker uses the public target you enter to make a diagnostic request. Do not place credentials or private access tokens in a URL.

The page can be used without creating a visitor account. Your browser or device may limit unusually large files or demanding media jobs.

About Security Headers Checker

Security Headers Checker brings the required input, options and result into one focused workflow. Check important website security headers. The result changes when the source data or selected options change, so it is easy to run a second comparison.

Input

What to prepare

The public URL, domain, IP address, record type, or audit option requested by the checker.

Output

What the result represents

A point-in-time observation from the public target and the checks available on this page.

Typical use

A practical example

A practical way to use it is to run a fresh diagnostic after a hosting, DNS, certificate, redirect, content or performance change. Start with a representative input, inspect the first result, then adjust one setting at a time if you need a different outcome.

  • Investigating a public-site problem with Security Headers Checker.
  • Verifying a recent configuration change with Security Headers Checker.
  • Collecting a diagnostic snapshot before troubleshooting with Security Headers Checker.
Verification

Before you use the result

  • Results can vary by location, cache, DNS propagation and temporary server conditions. Confirm important findings with the relevant host or service.
  • Treat the output as a current diagnostic snapshot rather than a permanent guarantee.
Privacy and processing

The checker uses the public target you enter to make a diagnostic request. Do not place credentials or private access tokens in a URL.