HTTP Security Headers Checker
Inspect the HTTP security headers a website returns. The check runs from your own browser, so it is honest about what browsers are allowed to read -- when a site's CORS policy hides its headers, this tool tells you instead of guessing.
The request is made directly from your browser to the address you entered. SpectraShe does not proxy, log or store the URLs you check.
Why these headers matter
- Security headers are cheap, high-impact hardening -- most take one line of server configuration.
- Content-Security-Policy and X-Frame-Options defend users directly against XSS and clickjacking.
- Strict-Transport-Security removes the HTTP downgrade window attackers use on public Wi-Fi.
- Missing headers are a common finding in audits and bug-bounty triage, so learning to read them pays off quickly.
Security note
Only test sites you own or are authorised to assess. This tool performs a single ordinary GET request -- the same thing a browser does when you visit a page -- and never attempts to bypass access controls.
Related tools
User Agent Parser
Break a User-Agent into browser, OS and device, and flag bot or scanner signatures.
Password Strength Checker
Analyse password length, character variety and weak patterns locally in your browser.
URL Encoder / Decoder
Percent-encode and decode URLs and query parameters used in web security work.