← All tools
HTTP Security Headers Checker
See which security headers your website sends and which are missing.
Analysis messages from the checker are currently in Dutch.
How does it work?
Security headers tell the browser how to treat your site safely, for example HTTPS only or not inside a frame. We fetch your homepage and check the most important headers.
Frequently asked questions
Which header matters most?
Strict-Transport-Security (HSTS) enforces HTTPS. Content-Security-Policy is strongest against third-party scripts but also hardest to set up.
Where do I set headers?
In your web server, reverse proxy or hosting panel. It differs per platform.
Do I need an A score?
Not necessarily. What matters is that you choose consciously which headers fit your site.
Need help with your email security?
We set up DMARC, SPF, DKIM and MTA-STS for you and keep an eye on it, as part of Security and Monitoring.