All tools
HTTP Header Audit
Paste response headers. Get a graded report on HSTS, CSP, frame options, referrer-policy, COOP/COEP and more.
Paste any HTTP response header block. Status line is optional. We never fetch. Paste your real headers from devtools or curl.
// paste headers above to start, or click "try sample"
Everything here runs in your browser. Nothing leaves this tab.