Free SEO Tools
Security Headers Checker
Enter a URL to check for common security response headers and see exactly which are present.
About this tool
This checks for six commonly recommended security headers. A missing header is not proof of a vulnerability or that a site has been compromised — it's one layer of defense-in-depth among many, and its relevance depends on the site's specific setup.
Frequently Asked Questions
- Which headers are checked?
- Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy.
- Does a missing header mean the site is hacked?
- No — a missing header is informational, not proof of a vulnerability or compromise.
- Is this the same as HTTP Headers Checker?
- No — that tool shows a broader set of general response headers; this one evaluates specifically security-relevant ones.