What are your headers telling attackers?
Security headers are free to set and stop whole classes of attack — yet most sites send almost none. Paste a URL and get a graded report on exactly what's missing.
Crawling your site…
We’re walking your site page by page, reading it the way search engines do. Takes 1–3 minutes for most sites.
Want help fixing these?
Technical SEO is the foundation of every site we build and every ranking campaign we run. Book a free call and we’ll walk through your results with you.
What the check measures
The instructions your server sends with every page, telling browsers how to protect your visitors. Graded A+ to F, with a plain-English fix for each.
- Content-Security-PolicyThe strongest defence against injected scripts.
- Strict-Transport-SecurityHTTPS on every visit, with no downgrades.
- Framing & sniffingX-Frame-Options and nosniff stop clickjacking and file-type tricks.
- Referrer & permissionsWhat leaks to other sites, and which browser features your pages may use.
Check everything at once.
Create a free Codexio Dash account and we’ll run all seven checks on your website: speed, SEO, AI readiness, your Google listing, SSL, security headers and email. The report stays in your dashboard, and you can re-run it whenever you change something.