Instantly check which of the 6 essential HTTP security headers your site sets — and get an A+ to F grade.
Checks for: Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy.
A+ requires all 6 headers plus HSTS preload. Results are cached for 10 minutes.
Want a full security audit across 18+ checks? Run a full site scan →