_noob.tools
My IP
Return to Matrix Dashboard

Security Headers Scanner

Inspects the HTTP Response Headers of any website. Checks for HSTS, CSP, and X-Frame protections.

HTTP Response Headers Analyzer
Awaiting target URL...

What is the Security Headers Scanner?

Fetches a site's HTTP response headers and checks which of six common security headers — HSTS, CSP, X-Frame-Options, and others — are actually present.

How it works

The backend makes a normal GET request to the target (following redirects, so it sees the headers of the final page) and reads back the response headers. It then checks a fixed list of security-relevant header names against what came back, marking each as present or missing, alongside a full raw dump of every header the server sent.

SysAdmin & security use cases

  • Check whether a site enforces HSTS before trusting it to redirect HTTP to HTTPS.
  • Spot a missing X-Frame-Options or CSP frame-ancestors directive that would allow clickjacking.
  • Verify a CDN or reverse proxy isn't stripping security headers your origin server sets.
  • Compare the header set on a staging deployment against production before a release.