HeaderSec

Overview

Scan the current website's public HTTP security headers with HeaderSec.

HeaderSec gives developers and site owners a fast view of the HTTP security headers exposed by the current website. Open the extension, confirm the displayed origin, and choose **Scan security headers**. HeaderSec performs a server-side request to that public origin and checks controls including HSTS, Content Security Policy, clickjacking defenses, MIME sniffing protection, referrer policy, permissions policy, cookie attributes, and cross-origin policies. The extension sends only the website origin. It does not send page content, cookies, URL paths, query parameters, fragments, passwords, or form entries. Optional GitHub sign-in connects scans to a HeaderSec account. Anonymous scans remain available.

0 out of 5
No ratings
Learn more about results and reviews.

Details

Version
0.1.0
Updated
July 21, 2026
Flag concern
Size
30.1KiB
Languages
English
Developer
Website
Email
support@vmcsoft.com
Non-trader
This developer has not identified itself as a trader. For consumers in the European Union, please note that consumer rights do not apply to contracts between you and this developer.

Privacy

Manage extensions and learn how they're being used in your organization

HeaderSec has disclosed the following information regarding the collection and usage of your data. More detailed information can be found in the developer's privacy policy.

HeaderSec handles the following:

Personally identifiable information

Authentication information

Web history

Website content

This developer declares that your data is

Not being sold to third parties, outside of the approved use cases
Not being used or transferred for purposes that are unrelated to the item's core functionality
Not being used or transferred to determine creditworthiness or for lending purposes

Support

Header Craft

5.0

Effortlessly customize HTTP headers for efficient testing and a tailored web experience

Redirect Path

4.3

The HTTP Header & Redirect Checker for SEO

Referer Control

4.2

Manage HTTP Referer header for different domains

CSP Unblock

4.0

No more Content-Security-Policy limitations. This extension removes all CSP-related headers during website testing.

ModHeader V3 by modheader.app

5.0

ModHeader V3 by modheader.app | Modify remove override useragent referer cookies headers for HTTP API requests

Disable-CSP

3.7

A browser extension to disable http header Content-Security-Policy and html meta Content-Security-Policy

HTTP Headers

4.6

Quickly view HTTP headers for the current page.

HeaderForge

5.0

Local-only, open-source HTTP header modifier. No ads, no telemetry, least-privilege.

Modify Http Header

3.8

Modify Http Request Or Response Header.

HTTP Header Modifier

4.5

Modify HTTP request headers for specific URLs

HTTP Header Spy

5.0

Shows HTTP headers and site IP for current page

Mod Header

5.0

Add, change, or remove HTTP request & response headers. Scope each rule by request URL and by the site making the request.