Security Headers
Check HTTP security headers and get a grade from A+ to F
Why do security headers matter?
HTTP security headers like HSTS, Content-Security-Policy and X-Frame-Options protect users against XSS attacks, clickjacking and man-in-the-middle. Grade A+ means all recommended headers are in place.
HSTS enforces HTTPS. CSP blocks unauthorized scripts. X-Frame-Options protects against clickjacking. X-Content-Type-Options blocks MIME sniffing.
Grade scale
A+ (90-100) · A (80-89) · B (70-79) · C (50-69) · D (30-49) · F (<30). Most sites get C or F.