Security Headers Checker

Enter any website URL and get an instant A–F grade for its HTTP security headers, with exact, copy-paste fixes for every gap. Free, no signup.

Website URL

We fetch only the response headers from your URL server-side — no page content is stored. Standard web ports only.

Or paste headers manually (100% in-browser)

Fix every finding in minutes — Hardening Pack ($12)

Battle-tested, copy-paste security-header configs that score an A on this tool, for the stacks you actually ship:

nginx & Apache server blocks
Cloudflare Transform Rules / Workers snippet
Next.js (next.config headers) & Express (helmet config)
A safe, non-breaking Content-Security-Policy starter + rollout guide (report-only → enforce)

Get the Hardening Pack — $12

Secure checkout via Stripe. Delivery: after paying, forward your Stripe receipt to [email protected] and the pack (.zip, 10 files) is emailed back — usually within a few hours. Not happy? Reply for a full refund.

Server-side header fetch · no page content stored · more tools on smeltworks.com