← Inspect & Analyze
INSPECT & ANALYZE / LOCAL TOOL

Security Headers Checker

Review pasted HTTP response headers against common protections.

PROCESSING / LOCALInputs stay in this tab

Paste header text only. This tool does not request or scan a URL.

OUTPUT / LOCAL
Run the tool to see a result.
HOW IT WORKS

Reviewing browser security response headers

The checker reads pasted header lines and reports common protections such as HSTS, CSP, frame controls, MIME sniffing protection and referrer policy.

Limits to keep in mind

A header’s presence does not prove that its value is correct for your application. The checker does not fetch a website or validate every directive.

A PRACTICAL WORKFLOW

Use the result carefully.

01Paste a raw HTTP response status and its headers. The checker reviews common browser security headers.
02Run the utility and inspect the complete output.
03Test the full policy on a staging site and review browser console reports before deployment.
COMMON QUESTION
Can it scan a live URL?

No. It only analyzes header text pasted into this page.

Sources