TOOLS · WEB SECURITY · HTTP
Security Headers Analyzer.
Live-check common HTTP security headers, inspect their values, and calculate a simple browser-protection score. Direct browser inspection is attempted first; CORS limitations are clearly reported.
A browser cannot expose every cross-origin response header. Missing values therefore mean “not exposed/present in the readable response”, not proof of server-side absence.