Check website security headers — CSP, HSTS, X-Frame-Options and more — with an A–F grade. Free, instant, no sign-up.
Security headers are HTTP response fields that instruct browsers how to harden your site. Missing or weak headers leave room for clickjacking, MIME sniffing, XSS, and insecure HTTP — problems most site owners never notice until a scanner flags them.
Restricts which scripts, styles and embeds the browser may load — a strong defence against XSS.
Tells browsers to use HTTPS only, reducing protocol downgrade and cookie hijacking risks.
Controls whether your pages can be embedded in iframes, helping block clickjacking.
Forces the browser to respect declared MIME types with nosniff — no content sniffing.
We score HTTPS and six key headers on a 160-point scale, then map to grades from A+ to F.
A one-shot header scan you can run any time, with no account required.
この無料ツールについての短い回答です。登録は不要です。
HTTP security headers are response headers that tell browsers how to protect your site — for example against clickjacking (X-Frame-Options), MIME sniffing (X-Content-Type-Options), XSS (Content-Security-Policy), and forcing HTTPS (HSTS).
無料移行には DNS、SSL、メールレコードが含まれ、切り替え前に確認します。
