What security headers should every website have?

Essential security headers: Strict-Transport-Security (HSTS), Content-Security-Policy (CSP), X-Frame-Options, X-Content-Type-Options, and Referrer-Policy.

What does the Strict-Transport-Security header do?

HSTS tells browsers to always use HTTPS for your domain, preventing SSL stripping attacks. It should include max-age=31536000 and includeSubDomains.

Why check HTTP headers for SEO?

Headers like X-Robots-Tag can prevent indexing, Cache-Control affects page speed, and missing canonical headers can cause duplicate content issues.

What does X-Frame-Options prevent?

X-Frame-Options DENY or SAMEORIGIN prevents your pages from being embedded in iframes on other sites, protecting users from clickjacking attacks.

← Alle værktøjer / HTTP Header Analyzer

🔬

HTTP Header Analyzer

Undersøg HTTP-svarheadere for enhver URL. Tjek sikkerhedsheadere, caching, omdirigeringer, serverinfo og SEO-relevante headers. Gratis udviklerværktøj.

HTTP-sikkerhedsoverskrifter – hvorfor de betyder noget

HTTP-svarheaders fortæller browseren, hvordan den skal opføre sig, når den serverer dit indhold. Sikkerhedsheadere beskytter mod XSS, clickjacking og dataindsprøjtningsangreb. Manglende sikkerhedsheadere markeres af Googles Lighthouse og sikkerhedsscannere.

Overskrift	Formål	Indvirkning
`Strict-Transport-Security`	Tving HTTPS	Sikkerhed
`Content-Security-Policy`	Forhindre XSS	Sikkerhed
`X-Frame-Options`	Bloker clickjacking	Sikkerhed
`X-Content-Type-Options`	Forhindrer MIME-sniffing	Sikkerhed
`Cache-Control`	Browser caching	Præstation
`X-Robots-Tag`	Noindex/nofollow	SEO

Relaterede værktøjer

DNS-opslag
IP-adresseopslag
SSL-certifikatkontrol
← Alle værktøjer