Security Headers Checker — Network and Email Security Diagnostic

Network

Security Headers Checker checks an entered url on the server and checks http security headers such as hsts, csp, and x-frame-options.

Security Headers Checker

Server diagnosticSSRF protected

Only public domains and URLs are checked. Localhost, private IPs, link-local, and metadata hosts are blocked. Results are references based on DNS, TLS, and HTTP security standards, not a security audit.

URL

What is it

Security Headers Checker lets the Utillica server inspect DNS, email authentication, redirects, TLS, and HTTP security headers and summarize them for operational checks. Localhost, private IPs, link-local, and metadata hosts are blocked for SSRF protection. Results are references, not security guarantees.

Input → server probe with SSRF defense, timeout, hop limit → pass/warn/fail reference result

How to use

1Enter the url.
2Press check.
3Review records, policy, redirects, headers, or certificate results.

Reference

Security Headers Checker — Network and Email Security Diagnostic Reference
Input	Result
URL	checks HTTP security headers such as HSTS, CSP, and X-Frame-Options

Sources & standards

HTTP Semantics - IETF
The robots.txt file format - IETF
Sitemaps XML protocol - Sitemaps.org
The Open Graph protocol - Open Graph protocol
WHOIS Protocol Specification - IETF
The Transport Layer Security (TLS) Protocol Version 1.3 - IETF

FAQ

Can it check internal networks or localhost?

No. Localhost, private IP, link-local, and metadata hosts are blocked to reduce abuse and SSRF risk.

Does pass guarantee security?

No. pass/warn/fail is a reference judgment based on currently visible signals, not a security audit.