Security Header Analyzer

Paste a set of HTTP response headers (e.g. from curl -I or your browser's network tab) to check for missing security controls and information disclosure. Runs locally in your browser.