content="Build response headers and audit missing directives from pasted header output.">
JONESSL

HTTP security headers

Header builder

Generate consistent header templates and validate headers from a real response.

Starter header block

Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains; preload"
Header always set X-Frame-Options "DENY"
Header always set X-Content-Type-Options "nosniff"
Header always set Referrer-Policy "no-referrer"
Header always set Permissions-Policy "geolocation=()"

Analyze response headers

Finding capture

Total in this lab: 0

    Back to security checks Next: Apache hardening Knowledge: Security headers