EErgoKit

Security / SEO

Security Headers Checker

Review HTTP security headers and get practical recommendations.

Server-side checkPublic web targetsResponse body hidden
Runner

Inspect security headers

Submitted inputs are checked transiently by ErgoKit Workers. Results are not stored.

Enter a public URL to review its HTTP security headers and practical hardening recommendations.

Checks

  • Strict-Transport-Security
  • Content-Security-Policy
  • Clickjacking protection
  • Referrer and permissions policies

Result

  • Header score
  • Present and missing headers
  • Severity-ranked issues
  • Practical recommendations

Guardrails

  • Public HTTP and HTTPS URLs only
  • Private and local network targets blocked
  • Headers inspected without showing response body
  • Bounded redirects and timeouts

Privacy

Submitted URLs are checked by ErgoKit's Worker runtime. Results show metadata only; response bodies are not displayed.