DI VPN — Digital Identity

DNS & DOMAINS / DI VPN TOOL

HTTP Security Headers

Inspect common security headers from a public HTTPS website.

GUEST · NO ACCOUNT First-party DI VPN page Not saved to account
LIVE DIAGNOSTIC

Run HTTP Security Headers

NOT TESTED

Fetches only the response headers from a strict, public-only HEAD / request over verified TLS. No redirects are followed.

Your test results will appear here. Nothing runs until you press the button.

Full tests run only after you start them. Public tools need no extension. An optional extension status check may run in Chrome. Results are not saved to your DI VPN account.

What this tool checks

Content-Security-Policy, HSTS and other headers help mitigate common browser security risks.

Strict-Transport-Security
Content-Security-Policy
X-Content-Type-Options
Referrer-Policy and frame controls

How to run the test

  1. Enter a public hostname.
  2. Press Run test.
  3. Review each returned header as a configuration signal.
Important limitation

A missing header is not proof a website is compromised. Only the / path and a single public IP are examined.