OWASP Headers Engine
Security Headers & OWASP Audit.
Enforce CSP, HSTS, and X-Frame-Options while hiding sensitive Server and X-Powered-By technology headers.
OWASP HTTP Security Headers & Information Leakage StudioHeaders Auditor
OWASP Compliance · CSP / HSTS / X-Frame Enforcement · Server Technology Information Leak Obfuscation
OWASP Security Score57/100Grade D
Enforced Headers2/62/6 Active
Tech Info Leaks2Server: Nginx Leaked
OWASP ComplianceNON-COMPLIANT
HTTP Security Header Inventory
Content-Security-Policy (CSP)Value: Not Set
MISSINGStrict-Transport-Security (HSTS)Value: Not Set
MISSINGX-Frame-OptionsValue: DENY
SECUREX-Content-Type-OptionsValue: nosniff
SECUREReferrer-PolicyValue: Not Set
MISSINGPermissions-PolicyValue: Not Set
MISSING