Scan any website for HTTP security headers and track changes over time. Rescan after a deployment to see exactly what changed and get plain-English explanations of what each change means.
The Security Header Checker fetches the HTTP response headers for any publicly accessible website and checks for security-relevant headers including Content Security Policy, Strict Transport Security, X-Frame-Options, X-Content-Type-Options, Referrer Policy and Permissions Policy. Information disclosure headers such as Server and X-Powered-By are also flagged.
Each scan gets a permanent URL you can bookmark or share. Rescanning the same URL compares the latest result against the previous scan and produces a plain-English explanation of what changed and whether each change is an improvement, a regression or something to review. Useful after deployments, configuration changes or when investigating a security alert.