HTTP Headers Analyzer
Command paletteJump to a tool or workspace area
Quick navigation
Tools

Start typing to find a tool.

Actions
Recent tools stay in memory for this session↑ ↓ move · Enter open · Esc close

HTTP Headers Analyzer

Explain headers and audit CORS, CSP, and browser security controls locally.

Authentication values are redacted; this audit is advisory.
HTTP headersOne Header-Name: value per line
content-security-policymissingNo CSP was supplied in the pasted headers.
strict-transport-securitymissingNo HSTS policy was supplied.
x-content-type-optionsmissingUse X-Content-Type-Options: nosniff.
x-frame-optionsmissingReview frame embedding protection.
referrer-policymissingConsider an explicit referrer policy for sensitive applications.
permissions-policymissingConsider an explicit Permissions-Policy for browser capabilities.