Shop › Website security check
Security headers checker
Security headers are instructions your site sends to browsers to block common attacks. See your site's security grade in about 20 seconds: HTTPS and certificate, security headers, cookie flags, version leaks, mixed content, and whether scammers can send email as your domain (SPF and DMARC).
What you get
- Free: your grade and every finding in plain English.
- Fix-It Report: exact steps for your platform (Cloudflare, WordPress, Apache, Nginx, Netlify, Vercel, Squarespace, Wix, Shopify) and DNS records ready to paste.
Not a penetration test: it checks your public configuration, not your software's code or passwords.
The headers we check
Strict-Transport-Security (forces HTTPS), Content-Security-Policy (limits which scripts can run), X-Frame-Options or frame-ancestors (stops clickjacking), X-Content-Type-Options (stops file-type guessing), Referrer-Policy and Permissions-Policy, plus Secure, HttpOnly and SameSite flags on cookies.
Quick wins
On most hosts, HSTS, nosniff, framing protection and Referrer-Policy can be added in a few minutes in a settings panel, a plugin, or one config file. Content-Security-Policy takes more care; start in report-only mode.
What the grade means
Each missing protection lowers the score by its severity. A is solid public configuration; it doesn't mean the site's code has no bugs. That needs a code review or penetration test.
Questions
Can adding headers break my site?
HSTS and nosniff rarely cause problems on HTTPS sites. A strict Content-Security-Policy can block scripts you rely on, so roll it out in report-only mode first.
Do I need these on a small business site?
Yes. Automated attacks don't care about size, and these headers are free protection that takes minutes to set up.
Is the check safe?
Yes. It loads your homepage once like a normal browser and reads the response headers. It's passive.
More free tools: Debt snowball calculator · Debt avalanche calculator · Credit card payoff calculator · 50/30/20 budget calculator · Emergency fund calculator · SPF and DMARC checker · Website security check · Debt payoff planner · Budget planner