HTTP Security Header Inspector
Inspect and grade HTTP security headers (HSTS, CSP, X-Frame-Options) for any website.
Inspect and grade HTTP security headers (HSTS, CSP, X-Frame-Options) for any website.
About this tool
HTTP Security Header Inspector is a free, browser-based tool that lets you inspect and grade HTTP security headers (HSTS, CSP, X-Frame-Options) for any website. It supports URL → Headers. Everything runs locally on your device, so your files are never uploaded to a server. There's no sign-up, no watermark, and no limit — just open HTTP Security Header Inspector, add your input, and get results instantly.

Provide website URL to inspect.
Checks HSTS, CSP, and X-Frame-Options headers.
Get a clear security header compliance report.
HTTP Security Header Inspector processes your data locally in the browser. Nothing is uploaded, tracked, or stored u2014 your files never leave your device.
Use HTTP Security Header Inspector as much as you want with no fees, no watermarks, and no hidden limits.
HTTP Security Header Inspector runs in any modern browser. There's nothing to download, install, or configure.
Featured on

Learn how to evaluate password entropy, check leak status client-side, generate HMAC signatures, and inspect PEM X.509 certificates.
Read article
Compare cryptographic entropy between random passwords, multi-word passphrases, and 6-digit PIN codes.
Read article
Learn how to secure website communication using HTTP security headers, valid SSL certificates, and performance audits.
Read article