Free
SEO Checker
Score your page on 20+ SEO and local search factors, with plain-language fixes.
Security Header Checker
Grade your website's HTTPS and browser security headers from A+ to F, with copy-paste fixes. Free and instant.
Checking…
All response headers
Website Security
Want us to fix these safely?
We set up the right headers for your hosting, test them so analytics, chat and payment widgets keep working, and keep your site patched and monitored.
- Security headers and HTTPS set up correctly
- Content-Security-Policy rolled out without breaking anything
- Ongoing updates, backups and malware monitoring
What We Check
What this tool checks
The same headers that security scanners and penetration testers look at first, explained in plain language.
HTTPS & HSTS
A valid certificate, an http → https redirect and HSTS so browsers never fall back to insecure HTTP.
Content-Security-Policy
Whether the browser is told which scripts are allowed, the main defence against injected code.
Clickjacking & sniffing
X-Frame-Options / frame-ancestors and X-Content-Type-Options, two quick wins every site should have.
Privacy & leaks
Referrer-Policy, Permissions-Policy, cookie flags, mixed content and server version disclosure.
More Free Tools
Try our other free tools
Free
Domain & SSL Expiry Checker
See when your domain and SSL certificate expire, plus who hosts your site and email.
Free
Website Authority Checker
Check your website's authority score and how it compares, with DA, PA and Spam Score where available.
Free
Meta Tag & SERP Preview
See how your page looks in Google and on WhatsApp/Facebook, edit the title and description live, and copy the tags.
Free
Robots.txt & Sitemap Validator
Check that Google and AI crawlers like ChatGPT can reach your pages, and that your XML sitemap is valid.
FAQs
Security headers: questions
Prefer to talk it through? Our team in Thane West is happy to help.
What are HTTP security headers?
They are short instructions your web server sends with every page, telling the visitor's browser how to protect them: always use HTTPS, don't let other sites frame the page, don't run scripts from unknown places, and so on. They cost nothing and are set once on the server.
Will adding security headers break my website?
Most headers (HSTS, X-Content-Type-Options, Referrer-Policy, X-Frame-Options) are safe to add on almost any site. Content-Security-Policy is the exception: a strict policy can block analytics, chat widgets or embeds. Start it in report-only mode, check what it would block, then enforce it.
How do I add security headers in WordPress or on Hostinger?
On Apache or LiteSpeed hosting (Hostinger, most cPanel hosts) you can add them in the .htaccess file in your website's root folder using the "Header always set" lines this tool shows. Cloudflare users can add them with Transform Rules. Some WordPress security plugins also add them.
Does this tool attack or scan my website?
No. It loads one page the same way a browser does and reads the headers your server sends back, plus /.well-known/security.txt and a check that http:// redirects to https://. It does not test for vulnerabilities or send anything unusual.
Do security headers help SEO?
Not directly as ranking factors, but HTTPS is a confirmed Google ranking signal, and a hacked or "Not secure" site loses visitors and trust fast. Good headers reduce the risk of the kind of injected spam that gets sites flagged by Google.