Security Checks / Security Headers Check

Security Headers Check

Validate a baseline set of modern security headers.

Check a Website

Enter a URL to run a scan and review relevant security signals.

What It Is

Headers like X-Content-Type-Options, Referrer-Policy, and Permissions-Policy harden browsers.

Why It Matters

They reduce common attack surfaces (clickjacking, MIME sniffing, data leakage).

How to Fix

  • Set X-Frame-Options / frame-ancestors to prevent clickjacking.
  • Set X-Content-Type-Options: nosniff.
  • Set Referrer-Policy and Permissions-Policy based on your needs.