Security Headers Explainer
Paste your site's response headers — get a plain-English breakdown of each one.
How it works
If you run a website, your HTTP response headers are one of the highest-leverage security controls available. Paste a recent response header dump (from `curl -I` or your browser's DevTools Network tab) and we'll explain what's there, what's missing, and what each header actually does.
Methodology
We parse `Header-Name: value` pairs case-insensitively and match them against a reference set: HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, and the cross-origin trio (COOP, COEP, CORP).
Frequently asked questions
Where do I get my headers?
Run `curl -I https://yoursite.example` in a terminal, or open DevTools → Network → click any request → 'Headers' tab → 'Response Headers'.
Which header should I add first?
If you don't have HSTS yet, add it once you're confident HTTPS works on every subdomain. Then a strict Content-Security-Policy. Then the cross-origin policies.
Are these tested against my site?
No — this tool is an explainer for headers you paste in. It does not fetch external URLs.
Other free tools
Password Strength Checker
Estimate the entropy and crack-time of any password — entirely in your browser.
ToolPassword Generator
Create a strong, random password using your browser's secure RNG.
ToolPassphrase Generator
Generate a memorable random word-based passphrase for your master credential.
ToolBrowser Privacy Snapshot
See exactly what your browser exposes to every website you visit.
ToolQR Code Generator
Generate a QR code from any text or URL — entirely in your browser.
ToolWord Counter
Count words, sentences, paragraphs, and reading time as you type.
ToolCharacter Counter
Count characters with and without spaces — useful for SEO meta tags and tweets.
ToolURL Encoder / Decoder
Convert text to and from percent-encoded URL form, in your browser.
ToolBase64 Encoder / Decoder
Encode text to Base64 or decode Base64 to text — locally.
ToolMeta Title SERP Preview
See how your <title> tag looks in a Google search result, with character feedback.
ToolMeta Description SERP Preview
Preview your meta description and check it fits in a search snippet.
ToolRobots.txt Generator
Build a robots.txt with common rules, the right syntax, and your sitemap line.
ToolVPN vs Proxy Decision Helper
Answer four questions; get a clear recommendation.