Website security headers
Review common security-header presence and selected policy-value warning signs from a pasted HTTP response.
Runs locally in this browser; the text is not uploaded. Paste response headers only and remove cookies, tokens and internal details first.
Local heuristic triage only—not a complete parser, security score or penetration test. Review policy values and test the final HTTPS response with your approved tools.