Quick answer
Security headers are small instructions your server sends with every page. They stop clickjacking, force HTTPS and block mixed content. This tool fetches your homepage, lists every header and scores the six that matter most, with the exact line to add for each missing one.
01How to use the security headers checker
- Enter your website address.
- Click Scan. We make one request like a browser.
- Add the missing headers using the snippets shown, or ask support to add them for hosted customers.
02Questions about this tool
Which headers matter most?
Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy and Permissions-Policy.
Will adding headers break my site?
Most are safe. Content-Security-Policy needs care because it can block scripts. Start with Report-Only mode.
Where do I add them on cPanel hosting?
In the .htaccess file of your site. The tool shows the Apache lines. LiteSpeed reads the same file.