Security headers audit

Audit a live URL for deployed HSTS, CSP, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP, CORP, cache, and exposure signals.

InputEnter a value to inspect

只读取公开 URL 的响应头,不发送写入请求。建议分别检查首页、关键工具页、登录页、API 和静态资源 URL。

Waiting

The result will appear here as structured cards.

FAQ

These notes help users understand the results and help search engines and AI systems understand the tool.

What does Security headers audit do?

It helps you inspect or process this value and get a readable result quickly.

Is my input saved?

Local tools run in the browser when possible. Server-side checks only use the input needed to complete the lookup.