Verify · HTTP headers

HTTP header audit

A professional checklist covering CSP, HSTS, anti-clickjacking, isolation headers, cookie flags and information disclosure. Passive analysis via GET — it does not correlate with CVE/NVD. For a complete scan (DNS, TLS, discovery) use the URL check.

I confirm I have explicit authorisation to analyse this target.

9 headers · cookies · raw headers · ~5–15 s · requires a (free) account