NuqtiالعربيةStart free

Security Headers Checker

Grade a site's HTTP security headers from A+ to F — with what each header does and a ready-to-copy value.

100% freeLive dataEvery number explainedEnglish & Arabic

Free — no credit card. Sign in with Google (free) to keep checking and save your results; Lifetime unlocks the full lists.

What you get

Grade
A+ to F from six weighted headers
Present
Headers you already send
Missing
What to add, with an example value
Leaks
Headers revealing software versions

About the Security Headers Checker

Security headers are one-line instructions that tell browsers how to protect your visitors: force HTTPS (HSTS), block injected scripts (CSP), stop clickjacking (X-Frame-Options), stop file-type guessing and limit what leaks to other sites.

Nuqti checks six key headers, weights them by impact, deducts for version leaks like 'X-Powered-By: PHP/7.4', and gives an A+ to F grade with an example value for each missing header.

How to use it

  1. 1Enter a URLAny public page, e.g. https://example.com/page.
  2. 2Watch the check run liveEach step appears the moment it finishes — no waiting on a blank screen.
  3. 3Sign in free with GoogleSave your results and keep using every Nuqti tool on the free plan.

Frequently asked questions

Which security headers are most important?

Strict-Transport-Security and Content-Security-Policy carry the most weight, then X-Frame-Options and X-Content-Type-Options.

Do security headers affect SEO?

Not directly — but HTTPS, safety and user trust do, and a hacked site loses rankings fast.

Will a strict CSP break my site?

It can. Start with Content-Security-Policy-Report-Only to see what would be blocked, then tighten.

How do I add these headers?

In your web server (Nginx add_header, Apache Header set), your CDN's rules, or your framework's config (e.g. Next.js headers()).

Related free tools

SSL Certificate CheckerIs the HTTPS certificate valid, trusted and far from expiry? Chain, TLS version and HTTPS setup — scored.HTTP Header CheckerSee every HTTP response header a URL sends — status, caching, compression, CDN — each explained in plain words.Website Technology CheckerWhat CMS, framework, store platform, analytics and CDN does a website use? See its full tech stack.Free Backlink CheckerSee who links to any website — referring domains, anchors and link quality, explained in plain words.Website Authority CheckerA 0–100 score of how strong a site's backlink profile is — compared against millions of real websites.Free Keyword GeneratorTurn one seed word into hundreds of keyword ideas — with search volume and difficulty — for any country.

See all 49 free SEO tools →

Want the full picture? Every Nuqti tool is free to start.

Site Explorer, Keywords Explorer, Site Audit, Rank Tracker and AI visibility — one sign-in with Google, no card.

Start free with Google