Inspect response headers, security directives, and caching policies.
Analyzes all HTTP response headers from the server.
Checks for security-related headers like HSTS, CSP, X-Frame-Options.
Evaluates caching headers for performance optimization.
HTTP headers control security, caching, and how browsers handle your content. Missing or misconfigured headers can expose your site to attacks.
Security headers (HSTS, CSP, X-Frame-Options) and caching headers (Cache-Control) have the biggest impact.
Headers are typically configured at your web server, CDN, or through framework settings.