lilHeaders

Scan any site's live response headers, see what's missing and why it matters, and copy a ready-to-paste baseline for your host.

Is your site sending the right headers?

Try:

The header report shows up here: HSTS, CSP, frame protection, and the rest, each graded with the actual value found.

Recommended baseline

A safe starting set for any site. CSP is left out on purpose: it's site-specific, and a wrong one breaks things.

Free, no signupOpen source on GitHub All free tools

Next check

Headers sorted? Check your email next.

Locked-down response headers protect what visitors see in the browser. lilDMARC does the same for what lands in their inbox, testing your SPF, DKIM, and DMARC records so spoofed mail in your name gets rejected.

Test your email with lilDMARC

Rather not do it by hand?

Busywork like this is what we automate.

The checks you run every month, the reports you rebuild every week. We set up an agent to do the repetitive part, a person on our team supervises it, and everything runs in accounts you own.

Get your free automation

More free tools

lilTrace

Trace every redirect hop a URL takes so you can spot broken or sneaky redirect chains.

Open lilTrace

lilRedirect

Generate clean redirect rules for Netlify, Apache, and Nginx without hand-writing config.

Open lilRedirect

lilDMARC

Check your SPF, DKIM, and DMARC records so your email actually lands in the inbox.

Open lilDMARC

GET STARTED

Find out what you could stop doing.

We take the repetitive work that eats your week and automate as much of it as we can, so the only things left on your plate are the ones that actually need you.

Book your free automation

See what we automate

Smiling woman holding a smartphone at the center with orbiting logos of programming languages and platforms including Swift, Ok.ru, and others.