Security Headers Checker

Grade your site on HSTS, CSP, X-Frame-Options and other security headers.

Free, no sign up Live check from our servers

Quick answer

Security headers are small instructions your server sends with every page. They stop clickjacking, force HTTPS and block mixed content. This tool fetches your homepage, lists every header and scores the six that matter most, with the exact line to add for each missing one.

01How to use the security headers checker

Enter your website address.
Click Scan. We make one request like a browser.
Add the missing headers using the snippets shown, or ask support to add them for hosted customers.

02Questions about this tool

Which headers matter most?

Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy and Permissions-Policy.

Will adding headers break my site?

Most are safe. Content-Security-Policy needs care because it can block scripts. Start with Report-Only mode.

Where do I add them on cPanel hosting?

In the .htaccess file of your site. The tool shows the Apache lines. LiteSpeed reads the same file.