Developed by Mozilla, the HTTP Observatory performs an in-depth assessment of a site’s HTTP headers and other key security configurations.


Security Headers is described as 'Quickly and easily assess the security of your HTTP response headers' and is an app in the security & privacy category. There are more than 10 alternatives to Security Headers for a variety of platforms, including Web-based, Self-Hosted, SaaS, Docker and Mac apps. The best Security Headers alternative is HTTP Observatory, which is both free and Open Source. Other great apps like Security Headers are REDbot, Qualys SSL Server Test, Hardenize and TestSSL.
Developed by Mozilla, the HTTP Observatory performs an in-depth assessment of a site’s HTTP headers and other key security configurations.


REDbot is lint for HTTP resources. it tests protocol correctness, cacheability, content negotiation and more.

This free online service performs a deep analysis of the configuration of any SSL web server on the public Internet. Please note that the information you submit here is used only to provide you the service. We don't use the domain names or the test results, and we never will.

Hardenize provides a comprehensive and free assessment of web site network and security configuration.



The Website Security Test is a free online tool to perform web security and privacy tests:

Reviewing a website's Content-Security-Policy settings, suggesting improvements to protection, and possible bypasses to the policy.

Comprehensive SSL/TLS monitoring. We proactively monitor your SSL/TLS enabled domains to prevent expiry, misconfiguration, and insecure protocols. We watch and report any changes to your certificate so you can detect and respond to attempts at tampering or domain takeover.




Watch My SSL is a service that monitors the SSL certificates of your domains to ensure they do not expire unexpectedly. Receive notifications before SSL certificate expiry and monitor multiple domains and subdomains.

CodePhantom is a cutting-edge security scanning platform that empowers developers, DevOps teams, and businesses to maintain robust website security. Our automated platform performs comprehensive analysis of security headers, SSL/TLS configurations, DNS settings, and port...

