Free qa tool

Security headers checker

A quick, read-only check of headers a browser uses to reduce common web risks.

Last updated October 31, 2026

How it runs

The URL is fetched server-side with a timeout and an SSRF guard. Private networks are blocked.

QA · runs in your browser

free · no account

Public http(s) URLs only. Private networks and localhost are blocked. One page is fetched.

FAQs

Is this a security audit?+

No. It only reports response headers; it does not test vulnerabilities.

Why are some headers missing behind a CDN?+

The edge or origin may add or strip them; check the final response chain.

Find the bugs your tests never looked for.

Add your app, run an exploratory scan, and get a release verdict backed by evidence.