Web Security Configuration Tools
Passive public header, cookie, CSP, HSTS and website safety configuration checks.
Tools in this collection
HTTP Response Headers ViewerFetch public HTTP response headers safely and show observed values.Use tool →HSTS Policy CheckerCheck whether a public HTTPS response declares Strict-Transport-Security.Use tool →Content Security Policy CheckerInspect CSP directives found in HTTP response headers.Use tool →CORS Headers CheckerInspect cross-origin headers without probing private endpoints.Use tool →Clickjacking Protection CheckerCheck X-Frame-Options and CSP frame-ancestors declarations.Use tool →Cookie Flags CheckerInspect publicly returned Set-Cookie attributes for Secure, HttpOnly and SameSite.Use tool →Security.txt CheckerCheck public /.well-known/security.txt and its Contact/Expires fields.Use tool →HTTP Status Code CheckerRequest a public URL and report its actual status and redirects.Use tool →Content-Type Header CheckerExamine observed MIME type and content-type safety headers.Use tool →Cache Header CheckerInspect Cache-Control, ETag, Last-Modified and caching hints.Use tool →Server Header Exposure CheckerInspect Server, Via and X-Powered-By disclosure headers.Use tool →HTTP Canonical ConsistencyCompare final response URL to an HTML canonical link for conflicts.Use tool →Robots Meta CheckerInspect HTML robots directives and X-Robots-Tag headers.Use tool →Mixed Content InspectorLook for insecure HTTP resource references in an HTTPS HTML page.Use tool →CDN Header DetectorIdentify possible CDN signals in public headers, clearly marked as heuristic.Use tool →Website Technology HintsLook for observable CMS/framework/script clues; results are only heuristics.Use tool →Security Contact DiscoveryInspect the security.txt contact mechanism on a public domain.Use tool →
How to choose a tool
Start with the task you can validate from real public responses or source data. Use the relevant primary evidence and then compare related checks. These tools do not invent live keyword rankings, backlink counts, AI citations, or search volume.