Check HTTP security headers from the command line: HSTS, Content-Security-Policy quality, X-Content-Type-Options, clickjacking protection, Referrer-Policy, Permissions-Policy, COOP, cookie flags and version leaks, with a 0-100 score and A-F grade. Zero-dependency Node.js CLI, library and GitHub Action. Free online version by PromoPilot.
-
Updated
Oct 27, 2026 - JavaScript