HSTS Checker - Prador

  [ Rocketeers ](/)   

[Login](https://app.rocketeersapp.com) 

 Tool HSTS checker  

  No tools match “”

 URL to check Check Checking…

Try:  

 Result for  
-------------

 Strict-Transport-Security header

 ``

  max-age

includeSubDomains

preload-ready

What is HSTS?
-------------

**HTTP Strict Transport Security** is a response header (Strict-Transport-Security) that tells browsers to only ever connect to a site over HTTPS. Once seen, the browser refuses plain-HTTP connections for the duration of max-age, closing the window for downgrade and cookie-hijacking attacks.

 Add includeSubDomains to cover every subdomain, and preload with a year-long max-age to qualify for the browser [preload list](https://hstspreload.org/), which enforces HTTPS even on a visitor's very first request.