Technical audit

Security Headers Checker

Check whether a public URL responds with key security headers that support a smaller attack surface and better browser defaults.

This tool fetches a public URL from the Worker and reports whether important response headers are present.

It is useful as a quick pre-sales diagnostic because many business sites still miss basic browser hardening headers.

What it checks

  • Content Security Policy
  • HTTP Strict Transport Security
  • X-Frame-Options
  • X-Content-Type-Options
  • Referrer-Policy
  • Permissions-Policy

How to use the result

Missing headers do not automatically mean a site is compromised, but they often indicate weak operational defaults or incomplete platform setup.