Website Security Headers Checker
Enter a public URL to see which HTTPS and security headers are in place. You get a score and what to add next.
Results come from a live request to the public URL you enter. They are signals, not a guarantee of rankings or security.
Free tool made by Hridoy Ahmed. Found a bug or have a suggestion? Contact me. Need another free tool? Request it here.
How to use the Website Security Headers Checker
- Enter the website URL.
- Click Check Security and wait for the live request to finish.
- Review each item: green is in place, amber is partial, red is missing.
- Add missing headers in your server, CDN or security plugin, then test again.
Frequently asked questions
Is this a malware scan?
No. It only reads public response headers and basic HTTPS signals. It cannot detect malware or hacked files.
Which header should I add first?
Start with HTTPS and HSTS, then X-Content-Type-Options, X-Frame-Options (or CSP frame-ancestors) and Referrer-Policy. CSP is powerful but needs careful testing.
Will adding headers break my site?
A strict Content-Security-Policy can block scripts, fonts or embeds. Test on a staging site or in report-only mode first.
Related tools
Worried about your website security?
Manual, white-hat SEO. No shortcuts. Send me your site and I will review it by hand.