HTTP Header Analysis
Analyze HTTP response headers, check security headers (HSTS, CSP, X-Frame-Options), and trace redirect chains.
Security Headers We Check
Important HTTP headers that protect your website and users
lock
HSTS
Forces browsers to use HTTPS, preventing downgrade attacks.
policy
Content-Security-Policy
Prevents XSS attacks by controlling resource loading.
crop_free
X-Frame-Options
Prevents clickjacking by blocking iframe embedding.
description
X-Content-Type-Options
Prevents MIME type sniffing vulnerabilities.
security
X-XSS-Protection
Browser's built-in XSS filter (legacy but still useful).
link
Referrer-Policy
Controls how much referrer info is passed to other sites.
