Security headers generator

Generate HTTP security headers for the protections you want to enable on your site.

Preset

Enable HSTS

max-age duration (seconds)

Include subdomains

Request preload

X-Frame-Options

Cross-Origin-Opener-Policy

Cross-Origin-Resource-Policy

Cross-Origin-Embedder-Policy

Permissions-Policy

One directive per line or separated with commas.