Security Headers Generator

Generate HSTS, nosniff, Referrer-Policy, Permissions-Policy, COOP/COEP/CORP and X-Frame-Options for Nginx or Apache.

Preset

Enable HSTS

max-age duration (seconds)

Include subdomains

Request preload

X-Frame-Options

Cross-Origin-Opener-Policy

Cross-Origin-Resource-Policy

Cross-Origin-Embedder-Policy

Permissions-Policy

One directive per line or separated with commas.