Security Headers Checker
Analyze HTTP security headers (CSP, HSTS, X-Frame-Options, etc.) on any URL.
Score
/100
About Security Headers Checker
Security Headers Checker fetches the response headers of a URL and checks for important security headers: Content-Security-Policy (prevents XSS and injection), Strict-Transport-Security (enforces HTTPS), X-Frame-Options (prevents clickjacking), X-Content-Type-Options, Referrer-Policy, and Permissions-Policy. These headers are a cheap layer of defense that is often forgotten - this tool gives you a quick overview of which ones are still missing from your web server.
How to use
- 1 Enter the target you want to check (a domain, IP address, or URL) in the field provided.
- 2 Click the run button - the request is processed on Computing ID servers and the results are shown in the panel.
- 3 Read the results; copy the parts you need, or change the input and run it again to compare.
Free tools from Computing ID
Security Headers Checker is one of dozens of network, security, and developer utilities provided free of charge by Computing ID (PT Intprism Computing Technology). Every tool can be used without creating an account or logging in. For tools that run entirely in the browser, your data is never sent to our servers; for tools that need to call a server (such as a DNS lookup or SSL check), only the target you enter is processed, and it is not stored. If you need infrastructure to run your own services, Computing ID also offers Linux and Windows VPS, cPanel hosting, email hosting, S3 Object Storage, WireGuard VPN, and domain registration, with data centers in Indonesia and Singapore and 24/7 technical support.
Related Tools
SSL Checker
Check the validity, expiry date, and chain of a domain's SSL/TLS certificate.
Mixed Content Checker
Find HTTP resources loaded on HTTPS pages (the cause of browser warnings).
Password Breach Checker
Check whether a password has appeared in public data breaches, without sending the actual password.
CSR Generator
Create a Certificate Signing Request (CSR) and private key for your SSL application.