Headers, cookies & policies
Read response headers and examine CSP, cookies, CORS, referrer and permission policies.
Choose your next check
6 focused tools. Choose a module and follow the evidence.
6 tools
Web security
HTTP security headers
Inspect a live response for HSTS, CSP, framing rules and other browser security policies.
Web security
Content Security Policy audit
Parse a pasted CSP, inspect effective fallbacks and identify permissive script policies.
Web security
Cookie security audit
Check pasted Set-Cookie headers for Secure, HttpOnly, SameSite and cookie prefix rules.
Web security
Referrer-Policy analyser
Identify the effective recognised Referrer-Policy token and explain its cross-origin behavior.
Web security
Permissions-Policy analyser
Read feature allowlists from a pasted Permissions-Policy response header.
Web security
CORS header analyser
Inspect pasted Access-Control response headers for wildcard, credential and cache pitfalls.
No tools match this search. Try another term or choose All tools.
← All Website security tools