Enter a domain and analyze HTTP security headers. Get a grade from A+ to F.
HTTP headers protect against clickjacking, XSS, MIME sniffing and protocol downgrade.
Configuring CSP, HSTS and X-Frame-Options is one of the simplest ways to strengthen security.