SSL & Security Checker
Check HTTPS and security headers
What we check
- HSTS
- CSP
- X-Frame-Options
- X-Content-Type
- Referrer-Policy
- Permissions-Policy
Check your website
Go deeper with these tools
Why is HTTPS important?
HTTPS encrypts data between the browser and server, protecting user privacy. It's also a Google ranking factor and required for many modern browser features like geolocation and service workers.
What are security headers?
Security headers are HTTP response headers that tell browsers how to behave when handling your site's content. They help prevent attacks like XSS (cross-site scripting), clickjacking, and MIME-type sniffing.
What is Strict-Transport-Security (HSTS)?
HSTS tells browsers to only access your site via HTTPS, even if a user types HTTP. This prevents downgrade attacks and cookie hijacking. Include "includeSubDomains" and "preload" for maximum security.
What is Content-Security-Policy (CSP)?
CSP specifies which sources of content (scripts, styles, images) are allowed to load. It's one of the most effective defenses against XSS attacks by preventing unauthorized scripts from executing.
What is X-Frame-Options?
X-Frame-Options prevents your site from being embedded in iframes on other sites, protecting against clickjacking attacks where attackers overlay invisible frames to trick users into clicking.
How do security headers affect SEO?
While security headers aren't direct ranking factors, they protect your site from attacks that could harm your SEO. Hacked sites may be penalized, and user trust is essential for engagement metrics that do impact rankings.