HEADHUNTER — HTTP Security Header Analyzer

Target URL

TARGET ://

Press Enter to scan · Include https:// or http://

HOW IT WORKS: HEADHUNTER uses a CORS proxy (api.allorigins.win) to fetch response headers from the target URL. No data is stored. All analysis runs locally in your browser. For private or internal targets, use the browser extension version or run a local proxy.

Interrogating Target

Fetching headers via DoH proxy · Running 15 security checks · Calculating threat score

FETCH FAILED

Unable to reach the target URL.

POSSIBLE CAUSES:
· Target URL is unreachable or doesn't exist
· CORS proxy rate-limited — wait 60s and retry
· URL missing protocol (add https://)
· Target blocks external requests

```

—

Security Grade

Target

—

/ 100

Security Findings

Raw Response Headers

▾

```