How to use Security Headers Checker
Enter a public page URL to inspect HSTS, CSP, frame protection, content-type protection, referrer and permissions policies.
What the tool does
Inspect important HTTP security headers and identify missing protection on a public page.
Supported inputs
The public URL, domain or metadata values requested by the form.
Actual output
A diagnostic result showing the checks performed and the findings that need review.
Privacy and processing
Public-site checks may be handled by the ToolTapGo server so the requested public resource can be retrieved.
Limitations
A missing header is a signal to review, not proof that a website is insecure. Correct policies depend on the application.
Common mistakes
Use the final public URL, distinguish redirects from failures, and remember that authentication, JavaScript rendering or anti-bot controls can change what the checker can retrieve.
Frequently asked questions
What can I use Security Headers Checker for?
Inspect important HTTP security headers and identify missing protection on a public page.
What input does Security Headers Checker accept?
The public URL, domain or metadata values requested by the form.
What should I check after using Security Headers Checker?
A missing header is a signal to review, not proof that a website is insecure. Correct policies depend on the application.
Related tasks and guides
- Website SEO Audit — Check page titles, headings, metadata and key on-page SEO signals for a public URL.
- Redirect Checker — Follow HTTP redirects and display each status code and destination.
- Broken Link Checker — Check links found on a public page and review HTTP redirects, client errors, server errors and request failures.
- Sitemap Generator — Crawl same-domain pages and create a basic XML sitemap.