01
HTTP header lookup
Find indexed websites where CSP, HSTS or related security header evidence was recorded.
HTTP policy intelligence
Security header analysis for CSP, HSTS and HTTP policies.
Analyze indexed HTTP security headers, including CSP and HSTS, with response and observation context for website security configuration review.
Try
Searches use the Pasha index. No live scan is started.
Start 7-day accessResponse context retained with the observation
CSP, HSTS and related policy evidence
No automatic vulnerability claim from a missing header
What you can find
Review CSP, HSTS and HTTP security headers.
Pasha Security Header Analysis helps you review indexed Content Security Policy, HSTS and related HTTP security header observations.
02
Content Security Policy review
Inspect a stored CSP and its response context instead of relying on a pass-or-fail score.
03
Website hardening review
Prioritize owned routes for an authorized check of current HTTP security headers.
Search coverage
Analyze HTTP security headers in context
Review recorded browser-security policies alongside the requested URL, response behavior, redirects and observation timestamp.
Interpret security headers beyond a score
Header presence is not the same as policy effectiveness. Validate the current response and application behavior before assigning impact or remediation priority.
Inspect each header with its route, response and observation context. A missing security header can indicate a hardening opportunity but does not prove a vulnerability.
Content Security Policy (CSP)
HTTP Strict Transport Security (HSTS)
X-Content-Type-Options and related headers
Response, redirect and route context
How it works
Search, review and verify.
Use security header analysis to find a recorded observation, inspect its context and verify the current state before acting.
- 01
Find header observations
Search the header signal filter or begin with a domain already in scope.
- 02
Preserve response context
Consider the requested URL, response type, redirects and observation time together.
- 03
Validate policy behavior
Confirm current headers and application behavior before assigning impact or remediation priority.
FAQ
About security header analysis.
Coverage, data freshness and when to check a live source.
Does a missing HTTP security header prove a vulnerability?
No. A missing header can indicate a hardening opportunity, but impact depends on the route, policy semantics and application behavior.
Does Pasha test the policy live?
No. This page searches stored observations and points users toward direct, authorized validation.
Start your search
Analyze security headers with the response context attached.
Review indexed HTTP policy evidence, understand what each header does and validate the current application behavior before remediation.