# Dev Headers

> Checks website security headers exist, formats the Content-Security-Policy (CSP) and Feature-Policy (FP) headers into an easy to read table, makes suggestions and sets a header for websites with a key that could be used to enable a debug mode.

Canonical page: [https://chrome-stats.com/d/dev-headers](https://chrome-stats.com/d/dev-headers)

## Overview

- **ID:** `dev-headers`
- **Platform:** Firefox
- **Type:** Firefox add-on
- **Status:** Available
- **Publisher:** Craig Francis
- **Category:** web-development
- **Daily users:** 1
- **Version:** 1.0.2
- **Last updated:** 2020-05-07
- **First published:** 2020-01-28
- **Size:** 80 KB
- **Data as of:** 2026-09-06
- **Store listing:** [Firefox Add-ons Store](https://addons.mozilla.org/firefox/addon/dev-headers/)
- **Website:** [https://github.com/craigfrancis/dev-headers](https://github.com/craigfrancis/dev-headers)

## Description

Dev Headers is a Firefox add-on that checks the existence of website security headers, formats Content-Security-Policy (CSP) and Feature-Policy (FP) headers into an easy-to-read table, makes suggestions, and sets a header for websites with a key that could be used to enable a debug mode.

## Rankings

- #108,225 — Overall

## Permissions and access

### Permissions

- `tabs`
- `storage`
- `webRequest`
- `webRequestBlocking`
- `<all_urls>`

## Safety

- **Risk impact:** High risk impact
- **Risk likelihood:** Moderate risk likelihood

### Analysis details

- Grants access to browser tabs, which can be used to track user browsing habits and history, presenting a privacy concern.
- This extension has low user count. Unpopular extensions may not be stable or safe.

> Some risk analysis details are omitted from this free response. [Upgrade to view the full analysis](https://chrome-stats.com/pricing).

## Similar extensions and apps

- [HTTP Header Security Auditor](https://chrome-stats.com/d/http-header-security-auditor) — 2 users
- [Security Header Grader](https://chrome-stats.com/d/security-header-grader) — 2 users
- [OWASP Secure Headers Checker](https://chrome-stats.com/d/owasp-secure-headers-checker) — 8 users
- [NetHeaders](https://chrome-stats.com/d/netheaders) — 28 users
- [HTTP Headers Viewer](https://chrome-stats.com/d/http-headers-viewer-iue) — 12 users
- [Security Headers Checker](https://chrome-stats.com/d/security-headers-checker) — 3 users
- [I Hate Security Headers!](https://chrome-stats.com/d/i-hate-security-headers) — 2 users
- [OWASP Secure Headers](https://chrome-stats.com/d/owasp-secure-headers) — 9 users
- [HTTP Headers](https://chrome-stats.com/d/http_headers) — 20 users
- [DevHeaders - HTTP Header Editor & Modifier](https://chrome-stats.com/d/devheaders) — 2 users
- [cSPY - SecurityHeader Scanner](https://chrome-stats.com/d/cspy) — 36 users, 5.00 / 5
- [Security Header Checker](https://chrome-stats.com/d/security-header-checker)

---

Source: [Chrome-Stats](https://chrome-stats.com/d/dev-headers)