Free tool · no account needed
HTTP Headers & Security Check
See the HTTP response headers a website sends, how fast it answered, and a security grade based on six important security headers.
Good to know
About the HTTP Headers & Security Check
Want to know before it breaks?
KeepUpTime checks this for you around the clock and alerts you by email, WhatsApp or Slack. Plans from $15 per month with a 3-day free trial.
Start free trialWhat are security headers?
They are instructions your server sends to browsers, such as forcing HTTPS or blocking your site from being framed. They protect visitors from common attacks.
How is the grade calculated?
One point for each of six headers: HSTS, Content-Security-Policy, X-Content-Type-Options, X-Frame-Options, Referrer-Policy and Permissions-Policy. 6 is A, 0 is F.
How do I add them?
In your web server, CDN (such as Cloudflare) or hosting control panel. Many WordPress security plugins can add them too.