Black Friday in 15 days: will your customers be able to pay? 25% off the first year and free setup, until 30 NovemberSee the offer →

Free tool

Check the HTTP security headers of a site

Enter a page address. The tool reads six security headers, including HSTS, CSP and X-Frame-Options, and gives a grade from A to F.

The result is shown to you only. Pathly stores neither the address nor the result, and keeps no list of tested sites.

Frequently asked questions

How is the grade calculated?

The grade starts at 100. Each missing header removes points. HSTS and CSP weigh the most. A page served over http gets an F.

Does an A grade mean the site is secure?

No. Headers are only one layer of protection. The tool does not test the site’s code, its plugins or its passwords.

How do I add a missing header?

In the configuration of the server, the CDN or a security plugin of the CMS. Test the page after each change: a CSP that is too strict can block scripts.

Free tools