Skip to tool

Security Headers Grader

Grade the security headers of any website.

How to Use This Tool

  1. Enter the Security Headers Grader input in the field on the page.
  2. Click "Grade" to run the tool in your browser.
  3. Read the result below the form and copy it if you need it in another app.

Learn More About Security Headers Grader

About Security Headers Grader

Grade security headers of any URL. Checks HSTS, CSP, X-Frame-Options, Referrer-Policy, and more.

About

Grade security headers of any URL. Checks HSTS, CSP, X-Frame-Options, Referrer-Policy, and more.
Grade security headers of any URL. Checks HSTS, CSP, X-Frame-Options, Referrer-Policy, and more.
Runs in browser
Yes
No signup required
Yes

Examples

Example usage

Try the tool with sample input.
Input
https://example.com
Output
Security headers grade for https://example.com/: F (0/6)

✗ Strict-Transport-Security
✗ Content-Security-Policy
✗ X-Frame-Options
✗ X-Content-Type-Options
✗ Referrer-Policy
✗ Permissions-Policy

Use Cases

  • Check security headers grader values while you draft a page, spreadsheet, or config.
  • Paste a sample into Security Headers Grader and copy the output into your workflow.
  • Keep sensitive inputs on-device — this page runs the calculation in the browser.

Frequently Asked Questions

Related tools: