What we offer

NEW CASE
Antana

We create digital solutions that work for businesses

Become a clientBecome a client
Give us a call +38 (066) 35-14-529

Let's take the first step towards your website — write to us

Close
Tools

Security Headers Check

Сайти

You may also like

Check whether the site has security headers configured: HSTS, CSP, X-Frame-Options and others.

Website security headers check

The service requests your site and checks six key security headers: Strict-Transport-Security (HSTS), Content-Security-Policy (CSP), X-Content-Type-Options, X-Frame-Options, Referrer-Policy and Permissions-Policy. Green mark — the header exists, red — it is missing.

These headers are basic security hygiene: they protect visitors from traffic interception, XSS attacks and clickjacking, and they are also a trust plus for Google. Most template sites have none of them. They are added with a few lines in .htaccess or the Nginx config — we do this for clients as part of website support.

FAQ

Why are security headers needed?
They protect visitors from attacks: HSTS enforces HTTPS, CSP blocks injection of foreign code (XSS), X-Frame-Options prevents clickjacking.
What is HSTS?
HSTS (Strict-Transport-Security) tells the browser to always open the site via HTTPS only, even if the user typed http. It protects against traffic interception.
What is CSP?
CSP (Content-Security-Policy) defines where the site is allowed to load scripts, styles and images from. It is the main protection against XSS attacks.
How to add these headers?
On Apache via .htaccess with Header set directives, on Nginx in the config via add_header. BB STUDIO configures them for clients automatically.
Telegram Viber Call us