Check the HTTP security headers of a public website and see which important protections are present or missing.
A Security Headers Checker inspects selected HTTP response headers returned by a public website. These headers can tell compatible browsers how to handle content, HTTPS connections, framing, referrer information and access to certain browser features.
EKO24.NET checks important headers including Content-Security-Policy, Strict-Transport-Security, X-Content-Type-Options, Referrer-Policy, Permissions-Policy and X-Frame-Options.
Security headers are one part of a website's overall security configuration. Correctly configured headers can help browsers reduce exposure to risks such as unwanted framing, MIME-type sniffing and insecure resource loading. A missing header does not by itself prove that a website is insecure, and header values should always be reviewed for compatibility with the website.
No. A missing header does not prove that a website is compromised or insecure. Website security depends on many server, application and configuration controls.
Partial means the header was detected, but the value found provides limited coverage according to this check.
No. The checker requests public HTTP response headers for analysis and does not change the website.