Use authorized targets
Run network checks only against systems you own or have explicit permission to assess.
WEB SECURITY · FREE TOOL
HTTP Security Headers
Check the browser security headers returned by a public HTTPS site.
AUTHORIZED PUBLIC CHECKS ONLY
Clear results without unnecessary data collection.
Enter only a public domain you own or are authorized to assess. Results are not stored by the tool.
Do not include a protocol, path, credentials or port number.
SAFE USE
Practical, transparent and privacy-aware.
Keep secrets out
Never paste passwords, access tokens, private keys or confidential customer data into diagnostic tools.
Confirm important findings
Automated results are a starting point. Validate changes in a staging environment before production.
Review regularly
Certificates, DNS records and web configurations change, so repeat important checks after deployments.