Security Headers
Check HTTP security headers including HSTS, CSP and Referrer-Policy. Identify missing browser protection headers with My Secure Labs.
How to use Security Headers
Enter a public website hostname and run the security-header check after verification.
Understanding the results
Review present and missing headers individually. Presence alone does not establish that a policy is configured safely. The score covers the listed response headers, not every application security control.