HTTP Compression Checker

Probes which HTTP methods appear enabled for each URL (OPTIONS + per-method requests) and flags risky methods like TRACE. Outputs per-URL results plus SUMMARY and REPORT.

Fetches URLs and validates the Referrer-Policy response header. Flags missing or risky policies (e.g., unsafe-url) and optionally checks against an expected policy. Outputs per-URL results plus SUMMARY and REPORT.

Audit HTTP caching response headers (Cache-Control, Expires, ETag, Last-Modified, Vary, Age). Optionally tests conditional revalidation using If-None-Match / If-Modified-Since. Useful for web performance tuning and debugging CDN/browser caching behavior.

Fetches URLs and validates the Strict-Transport-Security (HSTS) response header. Parses directives (max-age/includeSubDomains/preload), flags missing/invalid configuration, and checks common best practices. Outputs per-URL results plus SUMMARY and REPORT.

Fetches URLs and validates the Cross-Origin-Opener-Policy (COOP) and COOP-Report-Only response headers. Flags missing/invalid/unsafe policies to help with cross-origin isolation hardening. Outputs per-URL results plus SUMMARY and REPORT.

Security Headers Checker

pillowy_travel/security-headers-checker

Analyze HTTP security headers of websites and generate a security score. Detect missing headers like CSP, HSTS, X-Frame-Options, and more. Perfect for web security audits, vulnerability checks, learning, and automated monitoring.

Fetches URLs and validates the Content-Type header (MIME type + optional charset). Flags missing/mismatched types and recommends X-Content-Type-Options: nosniff. Outputs per-URL results plus SUMMARY and REPORT.

Fetches URLs and validates the X-Frame-Options response header (DENY/SAMEORIGIN). Flags missing/invalid/deprecated values and also detects CSP frame-ancestors. Outputs per-URL results plus SUMMARY and REPORT.

Fetches URLs and analyzes the Permissions-Policy header (and legacy Feature-Policy). Flags missing headers, invalid syntax, and risky wildcard allowances for sensitive features like camera/microphone/geolocation. Outputs per-URL results plus SUMMARY and REPORT.