Security Headers is described as 'Quickly and easily assess the security of your HTTP response headers' and is an app in the security & privacy category. There are more than 10 alternatives to Security Headers for a variety of platforms, including Web-based, SaaS, Self-Hosted, Mac and Windows apps. The best Security Headers alternative is DetectZeStack, which is free. Other great apps like Security Headers are HTTP Observatory, ConfigClarity, Qualys SSL Server Test and REDbot.
API suite for website intelligence: tech stack detection (Wappalyzer fingerprinting + DNS + TLS + HTTP headers), SSL/TLS certificate inspection, DNS intelligence with provider enrichment, security header analysis with letter grading, and technology change monitoring.
Developed by Mozilla, the HTTP Observatory performs an in-depth assessment of a site’s HTTP headers and other key security configurations.
United States
ConfigClarity is a suite of 6 browser-based audit tools for developers and sysadmins managing self-hosted infrastructure. Paste your configs and get instant visual audits with copy-paste fixes.
United States
This free online service performs a deep analysis of the configuration of any SSL web server on the public Internet. Please note that the information you submit here is used only to provide you the service. We don't use the domain names or the test results, and we never will.
United States
REDbot is lint for HTTP resources. it tests protocol correctness, cacheability, content negotiation and more.
Australia
Hardenize provides a comprehensive and free assessment of web site network and security configuration.
United Kingdom
The Website Security Test is a free online tool to perform web security and privacy tests:
Switzerland
Free continuous website security scanner and uptime monitor. Scan any site in 2 seconds, we checks TLS/SSL, security headers, DNS, exposed files, misconfigs and cookies.
Israel
Scruty is a comprehensive web security analysis platform that evaluates your website's security posture in seconds. It performs over 20 automated checks including SSL/TLS certificates, HTTP security headers (CSP, HSTS, X-Frame-Options), DNS configuration (DNSSEC, SPF, DKIM...
France
EU
Reviewing a website's Content-Security-Policy settings, suggesting improvements to protection, and possible bypasses to the policy.
Comprehensive SSL/TLS monitoring. We proactively monitor your SSL/TLS enabled domains to prevent expiry, misconfiguration, and insecure protocols. We watch and report any changes to your certificate so you can detect and respond to attempts at tampering or domain takeover.
