Paste a raw HTTP response or request header block. Each recognized header gets a one-line explanation, security-relevant headers are flagged as safe or weak, and a posture summary lists recommended security headers that are missing. Text only, nothing is fetched, nothing leaves this page.