Free HTTP Security Headers Checker

Check HTTP response headers for security best practices. Verifies HSTS, X-Content-Type-Options, X-Frame-Options, CSP, and more.

100% client-side - your data never leaves your browser.

Paste HTTP response headers (one per line)

Format: Header-Name: value (one per line). Get headers from browser DevTools Network tab.

Paste HTTP response headers above to check security headers.

Want automated scanning?

SCOUTb2 runs 25+ accessibility, performance, SEO, and security checks on any page automatically.