HTTP Strict-Transport-Security (HSTS) Header Auditor
Audits Strict-Transport-Security response headers for max-age and includeSubDomains directives.
Notice: engineering verification utility. Use test or de-identified data and verify results independently before relying on them.
How it works
Standard: RFC 6797 HTTP Strict-Transport-Security (HSTS)
Formula: Verify max-age >= 31536000 (1 year) and includeSubDomains flag presence
Checks: HSTS header string verification
Calculated locally in browser memory; nothing leaves your browser.
Deterministic local-first client-side execution. Provided as-is without warranty.