How it works
Run curl -sI https://your-site.example on a site you own or are authorized to test, then paste the output here. The tool checks HSTS, CSP, MIME sniffing, clickjacking, referrer and permissions policies, and headers that reveal server versions.
Privacy
The analysis runs in your browser and the text you paste is never uploaded. VulnFeed does not contact the site.