Security headers generator

Pick where your site runs and which headers you want. You get the exact config to paste, written for your platform. Free, and nothing you enter is stored.

What each header does

All of these are safe for almost every site except the Content Security Policy, which can block scripts you forgot to list. That's why the generator writes it in report-only mode. Our security headers guide explains each one and the common mistakes.