# Security Header Checker

> Check if a domain has HSTS enabled: max-age, includeSubDomains, and preload status.

Canonical page: [https://chrome-stats.com/d/security-header-checker](https://chrome-stats.com/d/security-header-checker)

## Overview

- **ID:** `security-header-checker`
- **Platform:** Firefox
- **Type:** Firefox add-on
- **Status:** Removed
- **Publisher:** Darius
- **Version:** 1.0.0
- **Last updated:** 2026-03-16
- **First published:** 2026-03-13
- **Size:** 15 KB
- **Data as of:** 2026-03-19
- **Store listing:** [Firefox Add-ons Store](https://addons.mozilla.org/firefox/addon/security-header-checker/)

## Safety

- **Risk impact:** Very low risk impact
- **Risk likelihood:** High risk likelihood

### Analysis details

- This permission has no access or impact on the user's system or data, thus carrying no risk.
- This extension is not longer available in the store

## Similar extensions and apps

- [Strict Transport Checker](https://chrome-stats.com/d/strict-transport-checker)
- [HSTS Checker](https://chrome-stats.com/d/hsts-checker) — 25 users
- [HTTPS+ Checker](https://chrome-stats.com/d/httpspluschecker) — 29 users, 3.57 / 5
- [Security Header Grader](https://chrome-stats.com/d/security-header-grader) — 2 users
- [Security Headers Checker](https://chrome-stats.com/d/security-headers-checker) — 3 users
- [cSPY - SecurityHeader Scanner](https://chrome-stats.com/d/vaultocean-header-scanner) — 36 users, 5.00 / 5
- [Dev Headers](https://chrome-stats.com/d/dev-headers) — 1 users
- [OWASP Secure Headers Checker](https://chrome-stats.com/d/owasp-secure-headers-checker) — 8 users
- [I Hate Security Headers!](https://chrome-stats.com/d/i-hate-security-headers) — 2 users
- [HTTP Header Security Auditor](https://chrome-stats.com/d/http-header-security-auditor) — 2 users
- [OWASP Secure Headers](https://chrome-stats.com/d/owasp-secure-headers) — 9 users
- [NetHeaders](https://chrome-stats.com/d/netheaders) — 28 users

---

Source: [Chrome-Stats](https://chrome-stats.com/d/security-header-checker)