// TOOLS

Security Tools

📋 HTTP Header Analyzer

Paste HTTP response headers and get a security analysis with score, findings and recommendations. A specific code? HTTP status codes reference.

Frequently asked questions

Which headers does it audit?
A site security headers: CSP (with fine-grained analysis of unsafe-inline, wildcards and missing directives), HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy and the cross-origin ones (COOP/CORP).
What CSP should I set?
Start with the CyberEscudo CSP Builder, which assembles it by directive and warns about weak choices. The golden rule: avoid 'unsafe-inline' in script-src.
Can I analyze any website?
Yes, enter the URL and the tool reads its response headers.