Security headers check
Security headers check: HSTS, CSP and more, monitored
One deploy, proxy change or CDN setting is enough to drop a security header without anybody noticing. Full Stack Audit checks your HTTP security headers on a schedule and emails you the day one disappears or gets weaker.
What a result looks like
Strict-Transport-SecurityPassed
max-age=63072000; includeSubDomains; preload
Content-Security-PolicyWarning
Header missing — consider adding a strict CSP
X-Frame-OptionsFailed
Header missing and no frame-ancestors directive
Run these checks on your site
Free during early access. Each audit also runs the other 119 checks across security, SEO, performance and email.