# I Hate Security Headers!

> 🔥 Security header checker for pros! 🕵️‍♀️ Find weak CSP, HSTS & more. Stop XSS, clickjacking & data breaches. 💪

Canonical page: [https://chrome-stats.com/d/i-hate-security-headers](https://chrome-stats.com/d/i-hate-security-headers)

## Overview

- **ID:** `i-hate-security-headers`
- **Platform:** Firefox
- **Type:** Firefox add-on
- **Status:** Available
- **Publisher:** Nasher
- **Category:** web-development,privacy-security
- **Daily users:** 1
- **Version:** 1.0
- **Last updated:** 2025-06-21
- **First published:** 2025-06-18
- **Size:** 908 KB
- **Data as of:** 2026-09-09
- **Store listing:** [Firefox Add-ons Store](https://addons.mozilla.org/firefox/addon/i-hate-security-headers/)

## Description

This extension is your quick no nonsense go-to for web app tool for security headers. 🧐 Instantly identify missing or misconfigured CSP, HSTS, X-Frame-Options, and other critical headers. Protect against XSS, clickjacking, and injection attacks. 🚀 Copy/download findings for easy reporting. Perfect for security audits and hardening production environments. 🛡️

## Rankings

- #102,591 — Overall
- #119 — security

## Permissions and access

### Permissions

- `activeTab`
- `scripting`
- `webRequest`
- `webRequestBlocking`
- `<all_urls>`

## Safety

- **Risk impact:** Moderate risk impact
- **Risk likelihood:** Moderate risk likelihood

### Analysis details

- Allows access to all websites, posing a significant security risk as it can monitor and modify data from any visited site.
- This extension has low user count. Unpopular extensions may not be stable or safe.

> Some risk analysis details are omitted from this free response. [Upgrade to view the full analysis](https://chrome-stats.com/pricing).

## Similar extensions and apps

- [HTTP Header Security Auditor](https://chrome-stats.com/d/http-header-security-auditor) — 2 users
- [cSPY - SecurityHeader Scanner](https://chrome-stats.com/d/vaultocean-header-scanner) — 33 users, 5.00 / 5
- [cSPY - SecurityHeader Scanner](https://chrome-stats.com/d/cspy) — 33 users, 5.00 / 5
- [Security Header Grader](https://chrome-stats.com/d/security-header-grader) — 2 users
- [Clickjacking Checker](https://chrome-stats.com/d/clickjacking-checker) — 33 users, 5.00 / 5
- [Security Headers Checker](https://chrome-stats.com/d/security-headers-checker) — 3 users
- [OWASP Secure Headers Checker](https://chrome-stats.com/d/owasp-secure-headers-checker) — 8 users
- [Dev Headers](https://chrome-stats.com/d/dev-headers) — 1 users
- [OWASP Secure Headers](https://chrome-stats.com/d/owasp-secure-headers) — 8 users
- [HSTS Checker](https://chrome-stats.com/d/hsts-checker) — 25 users
- [Web Safety](https://chrome-stats.com/d/web-safety) — 1 users
- [SecurityHeaders.io Analyser](https://chrome-stats.com/d/securityheaders-io-analyser) — 158 users, 5.00 / 5

---

Source: [Chrome-Stats](https://chrome-stats.com/d/i-hate-security-headers)