Livesecurityshipped v1.0.0
HTTP Header Analyzer
Analyze HTTP response headers for security best practices. Get a security score based on presence and configuration of headers like Content-Security-Policy, Strict-Transport-Security, X-Frame-Options, and more. Highlights missing headers with explanations and copy-paste fixes.
httpheaderssecurityanalysiscsphsts
63
security score
0 critical3 warnings5 good
Warnings
⚠
Content-Security-PolicyContains 'unsafe-inline' — weakens XSS protection
⚠
ServerReveals version: "nginx/1.18.0" — fingerprinting risk
⚠
X-Powered-ByReveals tech stack: "Next.js"
Passed
✓
Strict-Transport-SecuritySet with max-age=63072000
✓
X-Frame-OptionsSet to DENY
✓
Content-Security-PolicyCSP set
✓
X-Content-Type-Optionsnosniff (MIME sniffing disabled)
✓
Referrer-Policystrict-origin-when-cross-origin
Info
ℹ
Permissions-PolicyNot set — consider for sensitive sites
🔒 Get real headers via: curl -I https://example.com