Security Headers Generator
Pick the security headers you need and copy ready code for Apache or LiteSpeed .htaccess, Nginx, Cloudflare or PHP.
No sign-up. Most tools run in your browser; site checkers read a page once and store nothing.
Pick the security headers you need and copy ready code for Apache or LiteSpeed .htaccess, Nginx, Cloudflare or PHP.
Choose file types and cache times and copy ready code for Apache or LiteSpeed .htaccess (mod_deflate, mod_brotli, mod_expires, Cache-Control) or Nginx (gzip and expires).
Crawl from your homepage or paste a URL list to get a clean sitemap.xml.
Turn a logo, photo, letters or an emoji into favicon.ico (16, 32, 48 px), PNG icons in 48, 96, 180, 192 and 512 px, a site.webmanifest and the head tags.
Enter an https page address, or paste its source, and see every file that still loads over http://: images, scripts, style sheets, iframes, fonts, video, forms and CSS url() calls.
Build JSON-LD structured data for Organization, WebSite, Article or BlogPosting, FAQPage, LocalBusiness, BreadcrumbList and Person.
Check one page or crawl your whole site on the same host.
Enter a domain and see if its certificate is valid, how many days it has left, who issued it and which names it covers, including www.
Enter one or more domains to see SPF (one record, lookups against the limit of 10, ending, includes), DMARC policy, reports and alignment, DKIM keys under…
Enter one or more domains to read official registry data through RDAP, the successor of WHOIS: registration and expiry dates, days left, last update…
Type an SMTP server, port and encryption to see whether it answers, which TLS it uses, whether its certificate is valid and which logins it offers, without a password.
No tool matches your search.