100% Free • Instant Checks
Security Headers Checker
Scan HTTP Response Headers
Audit common security headers like HSTS, CSP, X-Frame-Options, and more. Quickly find gaps and improve your website’s security posture.Works for any public URL or domain.
Instant Scan
Header Score
Actionable Gaps
Free Forever
Check Security Headers
We fetch the URL server-side and scan for common security headers.
Powerful Features
Everything you need to scan and understand security headers
Common Headers Check
Scans for CSP, HSTS, X-Frame-Options, and more.
Instant Results
See your header score and missing headers instantly.
Security Insights
Understand why each header matters and what it protects.
Ship Secure by Default
Use Server Compass to deploy with security best practices baked in.