Security header check for websites
Free check of a website’s security headers (HSTS, CSP, X-Frame-Options and more) with a rating and suggested fixes. No data is stored.
Background
Small setting, big protection.
With a few lines in the server configuration, a website instructs the browser to load only encrypted content, not to run foreign scripts and not to be embedded in other sites. Without these headers, attacks such as clickjacking or injected code are easier.
Add the headers?
seacube sets up the right configuration for Apache, nginx or WordPress – without affecting the website.