Free Scan

Website security header scanner

Check the security basics your website should send to every browser, and get a grade with exact fixes.

We make one ordinary request to your home page, like a browser would, and read the response headers. Takes a few seconds. Only scan sites you own or manage.

What we check

  • A valid HTTPS certificate and a redirect from HTTP
  • HSTS, Content-Security-Policy and clickjacking protection
  • MIME sniffing, referrer and permissions policies
  • Secure, HttpOnly and SameSite flags on cookies
  • Whether headers reveal software versions

These are the quick wins that stop whole classes of web attacks, and they're often just a few lines of server config.