Greywell Cyber

Tools

Security Headers Checker

Enter the address of a public website. Our server fetches the page, reads the security headers it sends back and grades them against the OWASP recommended set. We do not keep the address or the result.

The grade reads headers only. It is not a security assessment of the site. Please check only sites you are allowed to.

What We Check
  • Strict-Transport-Security (HSTS)
  • Content-Security-Policy
  • X-Content-Type-Options
  • X-Frame-Options
  • Referrer-Policy
  • Permissions-Policy
  • Cross-Origin-Opener-Policy
  • Cross-Origin-Resource-Policy
Found This Useful, or Spotted Something Wrong? Tell Us
Topic

We read every note ourselves. Leave an email only if you would like a reply: we use it for that alone and delete it with the note after 12 months. Cloudflare Turnstile checks you are human. The privacy policy has the detail.