Header Hardening Advisor
Evaluate HTTP request/response headers for risky CORS settings, missing cache controls, and absent security headers. Free header hardening tool by Graph Tools.
Use this free header hardening advisor to evaluate a set of HTTP request or response headers for security weaknesses. The tool checks for risky CORS configurations, missing Cache-Control directives on authenticated responses, absent security headers like X-Content-Type-Options and Referrer-Policy, and overly permissive credential settings. Paste raw headers and get prioritized hardening recommendations. Useful for security engineers, backend developers, and DevOps teams auditing API responses.