Free Tool
Security headerschecker
Check whether your site sends the security headers expected in NIS2 audits and BSI IT-Grundschutz reviews: HSTS, Content-Security-Policy, Permissions-Policy, X-Frame-Options, X-Content-Type-Options.
Want a full compliance audit?
Security headers are 1 of 8 signals our compliance gap scanner checks. The full scan also covers DMARC, /trust pages, GDPR policy clauses, consent management, open compliance hires.
Run full compliance gap scan