ruchira
// WEB & SEO TOOL

Security headers checker & CSP builder

Grade any site's HTTP security headers from A to F, then build a Content Security Policy with copy-ready snippets for Next.js, Vercel, Nginx and Apache.

  • Free
  • No sign-up
  • Checks run on our server
// HOW IT WORKS

4 steps, no sign-up.

Built and maintained by Ruchira Sachinthana. Spotted a bug or want a feature? Tell me.

  1. 01Enter a URL to grade its response headers, or open the CSP builder tab.
  2. 02Read each missing or weak header and the recommended value.
  3. 03In the builder, pick the sources your site loads scripts, styles, images and fonts from.
  4. 04Copy the snippet for your platform and deploy it in report-only mode first.
// FAQ

Security headers checker: questions, answered.

Something else? Ask on WhatsApp.

Strict-Transport-Security, Content-Security-Policy, X-Content-Type-Options, X-Frame-Options or frame-ancestors, Referrer-Policy, Permissions-Policy and Cross-Origin-Opener-Policy. Leaky headers like Server and X-Powered-By lose points.

More free tools

All tools
NEW
WEB & SEOWebsite launch checker

One URL in, one report out: SEO, social previews, security headers, performance, crawlability and AI search readiness, scored with fixes.

CHECKS A LIVE URL
NEW
AIAI search readiness

Can ChatGPT, Claude, Perplexity and Gemini read and cite your site? Check AI crawler access, llms.txt, structured data and server-rendered content.

CHECKS A LIVE URL
AIllms.txt generator

Create a valid llms.txt for your website in minutes. Import pages from your sitemap, group them into sections and download the file.

RUNS IN YOUR BROWSER
// CUSTOM TOOLS

Need a tool like this built for your team?

Chat on WhatsApp