Header checker – how well is your website protected?

Check the security headers of your page for free. You get a grade from A to F, see which protection settings are missing and get matching lines for nginx, Apache and Cloudflare.

Frequently asked questions

What are security headers?

Security headers are instructions your server sends to the browser with every page. For example, they forbid embedding in other sites, enforce encrypted connections or define where scripts may be loaded from.

How is the grade A–F calculated?

Six headers are rated with weights (HSTS and Content-Security-Policy count the most). 90 of 100 points or more gives an A, below 40 an F.

Can a header break my page?

Yes, especially a Content-Security-Policy that is too strict. Test it as “Report-Only” first and only enforce it once no more reports come in.

Don't just check once – keep an eye on it permanently

fastry monitors your website regularly and lets you know when something changes.

Try for free