Security Headers Configuration

Configure and test HTTP security headers: HSTS, X-Frame-Options, Referrer-Policy, Content-Security-Policy, Permissions-Policy, and custom headers.

Create Security Headers Environment

Environment Name (Optional)

HTTP Security Headers Configuration

Enable any combination of security headers below to create a test environment. After creating, test it to see the headers that would be applied to responses.

HSTS (Strict-Transport-Security)

Enforce HTTPS connections with Strict-Transport-Security header.

Max-Age (seconds)

includeSubDomainspreload

X-Frame-Options

Control whether the page can be embedded in frames.

Referrer-Policy

Control how much referrer information is included with requests.

Permissions-Policy

Control which browser features can be used (camera, microphone, geolocation, etc.).

Content Security Policy (CSP)

Define allowed sources for scripts, styles, images, and other resources.

Custom Headers

No custom headers added. Click "Add Header" to add key-value pairs.