Free tool

Security Header Grader

Grade CSP, HSTS, frame protection, MIME sniffing, referrer and permissions policies.

What this tool checks

• HTTP Strict Transport Security (HSTS)
• Content Security Policy (CSP)
• CSP strength
• Clickjacking protection
• MIME-sniffing protection
• Referrer-Policy
• Permissions-Policy

Go further

Monitor these controls continuously and get alerted when a deploy drops one.

Scan your site free → Monitor it continuously