Security Headers
Security Headers provides a fast external scan and links findings to explanations of headers such as CSP, HSTS, and frame protections.
Limitations: Header presence and a grade do not prove secure implementation. Content Security Policy and other controls require application-specific design and testing.
Why it is useful
Security Headers provides a fast external scan and links findings to explanations of headers such as CSP, HSTS, and frame protections. This resource is especially useful for Quickly checking whether a public website sends common defensive headers. Review the current instructions and limitations from Security Headers before relying on it for important work.
Limitations
Header presence and a grade do not prove secure implementation. Content Security Policy and other controls require application-specific design and testing.