Website Security Headers Checker

Website Security Headers Checker is an open-source web security tool that analyzes the actual HTTP/HTTPS response headers of a website.

The tool checks important security headers such as Content-Security-Policy, Strict-Transport-Security, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy, COOP, CORP, and COEP.

It performs server-side requests, follows redirects, validates the final destination, detects missing or incorrectly configured headers, and generates a 0–100 security score with actionable recommendations.

The project is built with Node.js, HTML, CSS, and vanilla JavaScript, with no database or external runtime dependencies.

It also includes SSRF protections for private and local network addresses, making the project suitable as a foundation for a publicly deployed security-checking service.

This project is useful for developers, website owners, and security professionals who want a quick overview of their website's HTTP security configuration.

Related web development and SEO resources:

• سئو سایت
• طراحی سایت

License: MIT

Built With

• css
• html
• http
• https
• javascript
• node.js
• security
• web