Headers inspected
Check HSTS, CSP, X-Content-Type-Options, Referrer-Policy, Permissions-Policy and X-Frame-Options. See whether each is present and whether a setting may need hardening.
SIXHACK / WEB
HTTP Headers Analyzer
HTTP security headers analyzer
Inspect HTTP security response headers, review weak settings, and understand the impact.
▤HTTP · Headers · Hardening
INPUT / 01
Input
OUTPUT / 02
Results
Results will appear here after processing the input.
HOW IT WORKS / GUIDE
Interpreting the results
Context matters
HSTS applies to HTTPS; X-Frame-Options can complement or be replaced by frame-ancestors. A missing header does not always mean there is an exploitable vulnerability.
Recommended workflow
Paste real response headers, review the findings and verify the resulting policy in a browser. Do not copy suggested settings without checking application compatibility.
NEXT / TOOLS