HTTP Security Headers Test
Test HTTP security headers (CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy).
Tool Upgrade Coming Soon
This tool is currently a preview template. We are actively upgrading it to 100% blueprint compliance with 10 extra features. Like all UnQTools features, the upgraded version will run 100% locally in your browser with zero network requests.
About HTTP Security Headers Test
Test HTTP security headers (CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy). Everything runs locally in your browser — your data never leaves your device.
How to use
- Enter your input in the tool above.
- Adjust any options to your preference.
- Use the Copy or Download buttons to save the result.
- Everything happens locally — your data never leaves your browser.
FAQ
What does this tool do?
Test HTTP security headers (CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy).
Is my data sent to a server?
No. This tool runs 100% in your browser. Nothing is uploaded, tracked, or stored remotely.
What extra features does this tool have?
Extras: (1) (1) CSP header check, (2) (2) HSTS header check, (3) (3) X-Frame-Options check, (4) (4) X-Content-Type-Options check, (5) (5) Referrer-Policy check, (6) (6) Permissions-Policy check, (7) (7) Cross-Origin headers, (8) (8) Grade A-F scoring, (9) (9) Improvement recommendations, (10) (10) Copy curl test command, (11) (11) Export report, (12) (12) PWA offline
Does this work offline?
Yes — install as a PWA and use it without network.
Related tools
.htaccess Generator
Generate Apache .htaccess rules: redirects (301/302), URL rewrites, auth, IP allow/deny, custom error pages, security headers, HTTPS force, www force, and 10+ extras. 100% private.
AES-256 Encryptor / Decryptor
Encrypt and decrypt text with AES-256-GCM via the Web Crypto API. PBKDF2 key derivation, salt + IV, and 10+ extras. 100% private — runs in your browser.
API Authentication Header Builder
Build API authentication headers: Bearer token, Basic Auth, API Key, HMAC, AWS Signature v4.