HSTS (HTTP Strict Transport Security) Test

About HSTS

HSTS (HTTP Strict Transport Security) helps to protect from protocol downgrade attacks and cookie hijacking.

HSTS is a security policy one can inject into the response header by implementing it in web servers, network devices, and CDN. This instructs the browser to load website content only through a secure connection (HTTPS) for a defined duration.

As you can guess, your website must be accessible over HTTPS to take advantage of HSTS. You can refer to this guide to implement HSTS in Apache,Nginx, and Cloudflare.

Once implemented, you can head back to our tool to verify HSTS.