Developer tools
HTTP Security Headers Analyzer
Spot missing or risky response headers without contacting a site.
Processed locally. Your input and output are never uploaded.
Tool overview
HTTP Security Headers Analyzer tool overview
Analyze pasted HTTP response headers for common security controls. PasteTidy keeps the source and generated result separate so the transformation can be reviewed before copying or downloading.
HTTP Security Headers Analyzer workflows
- Prepare http security headers analyzer output for a repeatable workflow
- Review local results before publishing or importing
- Keep sensitive pasted content in the current browser tab
Use HTTP Security Headers Analyzer locally
- Paste the source text or load the example.
- Choose the documented options.
- Review the result and any warnings before copying it.
HTTP Security Headers Analyzer controls
- Options are explicit and affect only the local result.
- The output remains separate from the source for review.
- No input or output is placed in URLs or analytics.
HTTP Security Headers Analyzer example
Before
content-security-policy: default-src 'self' x-frame-options: DENY referrer-policy: no-referrer
After
Present: Content Security Policy, X Frame Options, Referrer Policy Missing: strict-transport-security, x-content-type-options Warnings: review missing controls
HTTP Security Headers Analyzer limits and excluded claims
- It analyzes pasted headers only and never fetches or probes a remote URL.
- Malformed or ambiguous input may require manual review.
- Large inputs remain subject to browser memory and shared worker limits.
Browse all developer tools tools โ
Questions
HTTP Security Headers Analyzer FAQ
Does HTTP Security Headers Analyzer upload my input?
No. It runs locally in your browser without an upload endpoint.
Is the result authoritative?
It analyzes pasted headers only and never fetches or probes a remote URL.
Can I review the source after processing?
Yes. The input remains separate from the generated result until you reset or replace it.