Enter a domain
Submit any publicly accessible HTTP or HTTPS website.
Know what protects
your website.
Instantly inspect HTTP security headers, uncover exposed attack surfaces, and get a clear, actionable security grade.
OWASP aligned Zero data retention Free to scan
How it works
HOW IT WORKS
ShieldCircle turns complex response headers into a report you can act on in seconds.
We inspect safely
Our server-side scanner evaluates six critical security controls.
Act on the report
Review your grade, risks, attack vectors, and clear remediation steps.
WHAT WE CHECKSix headers.
Six headers.
A stronger perimeter.
01Content-Security-PolicyXSS & injection
02Strict-Transport-SecurityMitM & SSL stripping
03X-Frame-OptionsClickjacking
04X-Content-Type-OptionsMIME sniffing
05Referrer-PolicyInformation leakage
06Permissions-PolicyBrowser capability abuse