Analysis runs locally and never contacts the target server. The score is a configuration triage aid, not a vulnerability scan, compliance certification, or complete security audit.
About HTTP Header Analyzer
Strictly analyze response chains, security headers, caching, CORS, and modern __Host-/Partitioned cookie rules.
No installation is required and input is not permanently stored. Encoding, formatting, image and QR tools run locally in your browser; only network lookups connect to their respective services.