Security Headers Check

A-F grade of response headers per the OWASP Secure Headers Project, using only curl. No signup required.

Prerequisites

• curl

Trigger

• "Check the security headers on example.com"
• "Do I have HSTS configured correctly?"
• "Grade my site's headers"
• "Is my CSP safe?"

Workflow