Analyze CSP, HSTS and related HTTP security headers with remediation snippets.
Inspect CSP, HSTS, Referrer-Policy, and related HTTP security headers.
This score is a defensive configuration review — not a penetration test, CVE audit, or guarantee of security.
This scanner is part of the Cyber Security PRO add-on.
Scanning…
More from the same category
Full defensive configuration scan: TLS, headers, cookies, DNS and email auth.
Detect WordPress and review public exposure/config signals without fake CVEs.
Passive API configuration audit — HTTPS, headers, CORS signals (no exploitation).
Inspect Secure, HttpOnly and SameSite flags on public Set-Cookie headers.
Certificate health and TLS posture using the shared SSL engine.
Deep Content-Security-Policy review with remediation guidance.
Learn more — open a section when you need details
Lightweight scan of HTTP security headers with clear remediation snippets for Apache, nginx, PHP, and Laravel.
Enter a public HTTPS URL.
Click Scan.
Review missing or weak headers and copy suggested configs.
Tune CSP carefully — overly strict policies can break assets.
Light tool — does not debit full-scan allowance.
This is configuration review, not a pentest.