Security Headers
FreeReview defensive HTTP response headers and explain gaps.
Loading…
Loading…
ZeroAuthority / tools / web security
Headers, TLS, CORS, CSP and exposed files for websites.
Review defensive HTTP response headers and explain gaps.
Inspect certificate and protocol details from supplied evidence.
Validate a security.txt document and contact fields.
Analyze supplied headers and HTML markers for technology clues.
Look for .git, .env, backups and admin panels.
Probe an endpoint for reflected, null and wildcard origins.
HTTPS, headers, DNS, email, cookies and exposed files in one report.
Evaluate or build a strict CSP with ready server config.