Content execution
Content Security Policy limits where scripts, styles and other resources may load from.
HTTP RESPONSE REVIEW
See the browser protections a website declares.
Inspect security headers, redirect behavior and cookie attributes, with practical explanations and carefully scoped recommendations.
SECURITY POSTURE
Header report
Redirect path
DEFENCE IN THE RESPONSE
What these headers influence
HTTPS enforcement
Strict Transport Security tells supported browsers to use HTTPS for future connections.
Embedding control
Frame protections help restrict which sites may embed a page and reduce clickjacking exposure.
Session boundaries
Secure, HttpOnly and SameSite attributes reduce common routes for cookie exposure and cross-site abuse.
Privacy and safety
The service retrieves response headers only, discards the response body and redacts every cookie value before returning results.
The score is educational and context-dependent. A missing header is not automatically a vulnerability, and a high score is not a penetration test or certification.