QawexQXPanel
Log inSign up
CyberNew

Security Headers Generator

Build CSP, HSTS and other security headers for Nginx, Apache, Cloudflare, Vercel or Next.js. Runs entirely in your browser, nothing is stored.

How this works
You pick the policies, and the config is generated in your browser for the server you use.
What we never see
Your site or server. Nothing is fetched or uploaded. To test a live site afterwards, run the Cyber Shield Scan.
Ticked = allowed for your own site; unticked = blocked everywhere.

Deployed it? Verify with the Cyber Shield Scan.

Need more than a free tool?

Qawex builds, secures and grows websites and systems. Talk to a person.

Browse services

Related tools

All tools
Cyber
Password Generator

Strong random passwords with a strength meter. Generated on your device, never sent anywhere.

Open Cyber
Hash Generator

SHA-1, SHA-256, SHA-384 and SHA-512 hashes, computed in your browser.

Open Cyber
JWT Decoder

Read a token's header, payload and expiry. Decode only, nothing leaves your browser.

Open Cyber
Has My Password Been Leaked?

Check a password against billions of leaked ones. Only a 5-character fingerprint prefix is ever sent.

Open