check-my-headers
Fast and simple way to check any HTTP Headers. Thanks Liran Tal and the amazing Snyk team for your support 😊. Usage: Command line - Using Node.js's npx to run a one-off scan of a website: npx check-my-headers https://example.com. The CLI will gracefully handle cases where the URL to scan is missing or wrong. Module - Using check-my-headers in your project: const checkMyHeaders = require('check-my-headers'); checkMyHeaders('http://example.com').then(({ messages, headers, status }) => { console.log(`Status code: ${status}`); console.log('Messages:'); console.log(messages); console.log('Current headers:'); console.log(headers); }); Output: Status code: 200, Messages: [{ msg: 'Remove field: server', type: 'error' }, { msg: 'Missing field: content-security-policy', type: 'error' }, { msg: 'Missing field: referrer-policy', type: 'error' }, { msg: 'Missing field: strict-transport-security', type: 'error' }, { msg: 'Missing field: x-xss-protection', type: 'error' }]
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
An easy-to-use and lightweight API wrapper for Censys APIs with support for Python 3.8+.
An open-source artifact metadata API for managing metadata about software resources and governing the software supply chain.
A lab designed for defenders to quickly build a Windows domain pre-loaded with security tooling and best practices in system logging configurations.
SecGen creates vulnerable virtual machines and hacking challenges for learning security penetration testing techniques.
A tool for SSH server auditing with comprehensive analysis capabilities.
Node package for preparing CTF events with OWASP Juice Shop challenges for popular CTF frameworks.
PINNED
Proton Pass is a cross-platform password manager that provides encrypted storage, password generation, and security monitoring features with integrated 2FA and dark web monitoring capabilities.
NordVPN is a commercial VPN service that encrypts internet connections and hides IP addresses through a global network of servers, featuring integrated threat protection and multi-device support.
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.