I Built a Browser-Only HTTP Header Analyzer — Security Scoring, Missing Header Warnings, 147 Tests

Short summary

Developer built a browser-based HTTP header analyzer that scores security headers from A+ to F, identifies missing critical headers with recommended values, and provides plain-English explanations. Tool runs entirely in-browser with zero dependencies, includes 147 passing tests, and offers presets for Nginx, Express, Apache, and intentionally-insecure configurations. Free and open at devnestio.pages.dev/http-header-analyzer.

• •Scores HTTP security headers (A+ to F) with detailed explanations for each header type
• •Identifies missing critical security headers (CSP, HSTS, X-Frame-Options, etc.) with recommended values
• •Runs entirely in-browser with zero dependencies and 147 test cases; includes presets for common server configurations

Generated with AI, which can make mistakes.