# OWASP Secure Headers

> Audit current page against OWASP Secure Headers guidelines. Reads response headers and meta fallbacks. Educational, read-only.

Canonical page: [https://chrome-stats.com/d/owasp-secure-headers](https://chrome-stats.com/d/owasp-secure-headers)

## Overview

- **ID:** `owasp-secure-headers`
- **Platform:** Firefox
- **Type:** Firefox add-on
- **Status:** Available
- **Publisher:** owasp-secure-headers-ext
- **Category:** other
- **Daily users:** 8
- **Weekly downloads:** 5
- **Version:** 1.0.0
- **Last updated:** 2025-08-27
- **First published:** 2025-08-24
- **Size:** 17 KB
- **Data as of:** 2026-09-08
- **Store listing:** [Firefox Add-ons Store](https://addons.mozilla.org/firefox/addon/owasp-secure-headers/)
- **Website:** [https://uu8852.com](https://uu8852.com/)

## Description

Secure Headers Auditor is a lightweight Firefox extension that evaluates how well a webpage aligns with the OWASP Secure Headers Project recommendations. It scans HTTP response headers and in-page <meta> fallbacks to highlight missing or weak configurations.

## Rankings

- #37,104 — Overall
- #76 — secure
- #157 — header
- #211 — response

## Permissions and access

### Permissions

- `activeTab`
- `tabs`
- `contextMenus`
- `storage`
- `<all_urls>`
- `webRequest`

### Content script matches

- `<all_urls>`

## Safety

- **Risk impact:** High risk impact
- **Risk likelihood:** Moderate risk likelihood

### Analysis details

- Grants access to browser tabs, which can be used to track user browsing habits and history, presenting a privacy concern.
- This extension has low user count. Unpopular extensions may not be stable or safe.

> Some risk analysis details are omitted from this free response. [Upgrade to view the full analysis](https://chrome-stats.com/pricing).

## Similar extensions and apps

- [OWASP Secure Headers Checker](https://chrome-stats.com/d/owasp-secure-headers-checker) — 8 users
- [HTTP Header Security Auditor](https://chrome-stats.com/d/http-header-security-auditor) — 2 users
- [Security Headers Checker](https://chrome-stats.com/d/security-headers-checker) — 3 users
- [Security Header Grader](https://chrome-stats.com/d/security-header-grader) — 2 users
- [cSPY - SecurityHeader Scanner](https://chrome-stats.com/d/vaultocean-header-scanner) — 33 users, 5.00 / 5
- [Cookies and HTTP Headers analyser](https://chrome-stats.com/d/cookies-and-headers-analyser) — 380 users, 3.67 / 5
- [I Hate Security Headers!](https://chrome-stats.com/d/i-hate-security-headers) — 1 users
- [HTTP Headers Viewer](https://chrome-stats.com/d/http-headers-viewer-iue) — 12 users
- [Dev Headers](https://chrome-stats.com/d/dev-headers) — 1 users
- [Web Security Audit](https://chrome-stats.com/d/web-security-audit) — 54 users, 5.00 / 5
- [HTTP Headers](https://chrome-stats.com/d/http_headers) — 18 users
- [OWASP Security Checker](https://chrome-stats.com/d/owasp-security-checker) — 9 users

---

Source: [Chrome-Stats](https://chrome-stats.com/d/owasp-secure-headers)