Security headerschecker

Check whether your site sends the security headers expected in NIS2 audits and BSI IT-Grundschutz reviews: HSTS, Content-Security-Policy, Permissions-Policy, X-Frame-Options, X-Content-Type-Options.

Want a full compliance audit?

Security headers are 1 of 8 signals our compliance gap scanner checks. The full scan also covers DMARC, /trust pages, GDPR policy clauses, consent management, open compliance hires.

Run full compliance gap scan