OMEGA SECURITY PRO — WEBSITE SECURITY
Website Security Header Checker
The online website-security endpoint performs bounded public HTTP(S) analysis. It is designed to avoid acting as an unrestricted internal-network fetcher.
Network safety and redirect scope
The endpoint accepts HTTP(S) only, resolves the requested host, rejects private/reserved IP destinations, validates each redirect target and follows a maximum of five redirects. TLS peer/host verification remains enabled.
Current checks
- Final HTTPS state
- Strict-Transport-Security (HSTS)
- Content-Security-Policy (CSP)
- X-Content-Type-Options
- X-Frame-Options
- Referrer-Policy
- Permissions-Policy
- Cross-Origin-Opener-Policy
The score is based only on these defined checks: HTTPS contributes 30 points and each of the seven listed headers contributes 10 points, capped at 100. It is not a penetration test or proof that the website is secure.