MSRXTools / Websites
Security headers analyser
Paste response headers from DevTools or curl -I and get the same header grading as the scanner, for pages we cannot reach.
Runs in your browser
Loading tool…
Good to know
- Open your site, press F12, choose Network, reload, click the first (document) request and copy the Response Headers.
- Or run curl -sI https://your-site and paste the output.
- Useful for staging and intranet sites the online scanner cannot reach.
Related tools
Website vulnerability scanner
Paste a URL. Get a SWOT security report scored out of 10: HTTPS, TLS, headers, cookies, content, DNS and email, with fixes.Exploited vulnerabilities, last 365 days
Every vulnerability CISA confirmed as exploited in the wild in the past year, live: php2shell, React2Shell, WordPress, SharePoint, Citrix, Fortinet and more. Search and filter.Content Security Policy evaluator
Find the gaps in a CSP: unsafe-inline, wildcards, CDN bypasses, missing object-src, base-uri and frame-ancestors.
Paste a URL. Get a SWOT security report scored out of 10: HTTPS, TLS, headers, cookies, content, DNS and email, with fixes.Exploited vulnerabilities, last 365 days
Every vulnerability CISA confirmed as exploited in the wild in the past year, live: php2shell, React2Shell, WordPress, SharePoint, Citrix, Fortinet and more. Search and filter.Content Security Policy evaluator
Find the gaps in a CSP: unsafe-inline, wildcards, CDN bypasses, missing object-src, base-uri and frame-ancestors.