ForgeTechnical
Security Headers Checker
Checks your homepage's response for five useful security headers, each reported on its own — never a single rolled-up "insecure" verdict from one missing header.
See which real, low-effort security headers your site is missing.
How this works
This checks your homepage's own HTTP response headers directly — nothing about your server's actual configuration beyond what it sends. We fetch your homepage directly — never Google Search or Google Maps — analyze the HTML and response ourselves, and never invent a fact we can't actually check. Where something is estimated rather than directly confirmed, it's labeled that way.
The website you provide
Computed entirely from what you told us — nothing looked up externally.
Questions about this tool
Just your homepage, on purpose — that keeps results fast and every finding traceable to something we actually fetched, rather than an unbounded crawl of your whole site.