Security headers analyzer
Paste the output of curl -sI and check HSTS, Content-Security-Policy, nosniff, frame protection, Referrer-Policy, Permissions-Policy and cookie flags. It analyses only the text you paste.
Runs in your browser. Your input is not sent anywhere.