HTTP Security Header Analyzer
Analyze HTTP security headers with compliance checking and security scoring
Security Headers Reference
Content-Security-Policy
Controls which resources can be loaded. Prevents XSS and data injection attacks.
default-src 'self'; script-src 'self' 'unsafe-inline'Strict-Transport-Security
Forces HTTPS connections. Protects against protocol downgrade attacks.
max-age=31536000; includeSubDomains; preloadX-Content-Type-Options
Prevents MIME type sniffing. Reduces exposure to drive-by downloads.
nosniffX-Frame-Options
Controls whether the page can be embedded in frames. Prevents clickjacking.
DENYReferrer-Policy
Controls how much referrer information is sent with requests.
strict-origin-when-cross-originPermissions-Policy
Controls which browser features can be used (camera, mic, location, etc.).
camera=(), microphone=(), geolocation=()Analyze HTTP Security Headers
Paste HTTP response headers above to analyze security configuration and get recommendations for improvement.
Similar Tools
Explore more tools in this category
Rainbow Table Defense Simulator
Learn why password salting and proper hashing are essential for security
Hash Type Identifier
Automatically identify hash types from hash values
Salt Generator
Generate cryptographic salts for password hashing
Hash Collision Demonstrator
Demonstrate hash collision probability with curve visualization