Security HTTP Response Header Generator
Enter your own HSTS, CSP, X-Frame-Options, Referrer-Policy and Permissions-Policy values. Fields start empty; only populated fields are included.
A QUICK WALKTHROUGH
How to use this tool
- Enter your chosen directives or value for each header.
- Generate and review the header text.
- Copy the text for your own review.
User-configured text
The builder trims surrounding spaces and joins each header name with your value. It does not choose directives, assess security or compliance, or configure a server.
GOOD TO KNOW
Common questions
Does it provide a recommended policy?
No. All values are entered by you; the tool does not supply a default policy.
Where are values processed?
Values stay in this browser. No request or deployment is performed.