Security Headers

Assess the security of your HTTP response headers.
Powered by @probely, created by @Scott_Helme.

[Security Headers @securityheaders]

We're happy to announce that Security Headers will be joining @probely! Read more from our founder, @Scott_Helme, in his blog post: https://t.co/lCtzLmMEai

[Security Headers @securityheaders]

For the first time in a long time, we've just updated our Grading Criteria.

You can read the full details from our founder, @Scott_Helme, over on the @probely blog:

https://t.co/CY9WnCIsUb

[Scott Helme @Scott_Helme]

This is something I've wanted to dig into for years but I've just never had the time to do it!

A deep analysis into the @securityheaders scan data, now possible thanks to our partnership with @probely 😎

https://t.co/8f54UUaSh9

[Security Headers @securityheaders]

Did somebody say Security Headers?! 💙

[Tanya Janca | Shehackspurple @shehackspurple]

Look who I saw at the @AppSec_Village ??? My favorite security headers fan, @Scott_Helme !!!

[Scott Helme @Scott_Helme]

Can anyone tell me the story behind the HSTS max-age value on Amazon? 🤔

There’s got to be a reason behind that! @amazon @AWSSecurityInfo @securityheaders

https://t.co/GmnAeymXDm

[Security Headers @securityheaders]

We’re at @BlackHatEvents with @probely! 🔒

Stop by booth #1486, try out a free scan of your website, grab some cool swag and meet our founder @Scott_Helme 😎

https://t.co/IwTh5UsFxp

[Security Headers @securityheaders]

Since our inception, we've now conducted 250,000,000+ scans!!! 🎉🥳🔒🌍💙

https://t.co/03xcrB3fIT

[Security Headers @securityheaders]

👀

[Report URI @reporturi]

Come and find us at @NDC_Conferences Oslo for our first ever vendor exhibit!

Meet our founder, see a product demo, enter our hacking competition or watch our artist create your swag live on the stand! It's going to be epic, we'll see you there 😎 https://t.co/RrySa7v1kr

[Report URI @reporturi]

Safari 16.4 is bringing support for the Reporting API! This means reports can be sent out-of-band asynchronously, and, we’re getting some new reports too.

✅ Reporting API
✅ COEP violation reporting
✅ COOP/COEP nav violation reporting

https://t.co/kHIUA1owWK

[Scott Helme @Scott_Helme]

A few people reached out to say they couldn't get their corporate card or approval in time so I've extended this code for another 7 days!

Apparently when you work for a company there's like "processes" and stuff! Who knew?! 😅

Use 15FORLIFE at checkout to get 15% off for life!!

[Scott Helme @Scott_Helme]

It's finally here!!! The @securityheaders API 😎

Launched right here, right now, at @NDC_Conferences #ndclondon 💪

https://t.co/ZSFcx7ULVd

[Scott Helme @Scott_Helme]

This is really interesting research and I wanted to know if I could expand upon it using Content Security Policy and reporting via @reporturi. I've just created https://t.co/8coZUGQT6a to do exactly that!

[Scott Helme @Scott_Helme]

I'm considering changing the grading criteria on @securityheaders to allow an A+ grade with a CSP that contains unsafe-inline in the style-src directive. What are your thoughts?

[Scott Helme @Scott_Helme]

1 TRILLION REPORTS!!!1!!1! 🌟✨🥳🥂🍾

[Security Headers @securityheaders]

@israelbestsales Nope, no caching. For generating a CSP I would recommend the CSP Wizard by @reporturi: https://t.co/VuBQdLUoHg

[Security Headers @securityheaders]

150,000,000+ scans?! A huge thanks to our sponsor @probely who have supported us through this milestone and made it possible!
😱💪🔥🎉❤🌍🔒

[Security Headers @securityheaders]

@sephr Not at present, sorry! cc @Scott_Helme

[Security Headers @securityheaders]

We're *fast* approaching 150,000,000 scans!!! Big thanks to our sponsor @probely, who continue to support us and make this all possible 🤩