Free tools/cabeceras http

HTTP security header analyzer

Reads your site’s response headers and scores CSP, HSTS, X-Content-Type-Options, X-Frame-Options, Referrer-Policy and Permissions-Policy.

Passive evaluation of HTTP headers from a public origin.

No port scans, payloads or authentication tests.

Need a real intrusion test?

It is performed under contract and written authorization.