About SecHeaders
An app that takes as an input some websites and then gathers, filter, visualize and generate statistics of their Security Headers. It's started as a mini-project for the course of "Mobile and Wireless Networks Security"...
An app that takes as an input some websites and then gathers, filter, visualize and generate statistics of their Security Headers. It's started as a mini-project for the course of "Mobile and Wireless Networks Security" at the Department of Information & Communication Systems Engineering, University of Aegean. So don't expect anything fancy lads. :bowtie: Also the project build with Android Studio IDE, if you want to you can import it to eclipse (needs to be converted).
The app will filter all headers to find the ones for security. Those will be filtered are 10 and mentioned above. :wink:
***Access Control Allow Origin - When Site A tries to fetch content from Site B, Site B can send an Access-Control Allow-Origin response header to tell the browser that the content of this page is accessible to certain origins.
***Content Security Policy (CSP) - Helps detect/prevent XSS, mixed-content, and other classes of attack. CSP 1.1 Specification.
***Cross Domain Meta Policy - Tells Flash and PDF files which Cross Domain Policy files found on your site can be obeyed; yes, it's a policy about other policies!
Server Information - Who has a need to know what type of server you're running?
***UTF-8 Character Encoding - Minimizing the likelihood that malicious character conversion could happen.
***X-Frame-Options (XFO) - Prevents your content from being framed and potentially clickjacked. X-Frame-Options draft.
***X-Powered-By - Who has a need to know what software version you're running?
***X-XSS-Protection - Cross site scripting heuristic filter for IE/Chrome.
***X-Content-Type-Options - Prevent content type sniffing "NoSniff".
***X-Download-Options - Prevent file downloads opening.
***HTTP Strict Transport Security (HSTS) - Ensures the browser never visits the http version of a website. Protects SSLStrip/Firesheep attacks. HSTS Specification
***Secure Cookies - Ensure that the server knows the client. Checking the use of Set-Cookie2 along to the insecure Set-Cookie.
***X-Pingback - Header for blogs, a url that allows other sites that link to that site/site's article to tell the site that it did link to that site. Before adding it, used for DDOS attacks.
P3P - Header for Platform for Privacy Preferences.
Previous Versions
Here you can find the changelog of SecHeaders since it was posted on our website on 2019-11-06 12:14:36.
The latest version is 1.0 and it was updated on 2026-06-21 17:17:36. See below the changes in each version.
SecHeaders version 1.0
Updated At: 2015-06-06
Disclaimer
External Download
We do not host SecHeaders on our servers. We did not scan it for viruses, adware, spyware or other type of malware. This app is hosted by Galad and passed their terms and conditions to be listed there. We recommend caution when installing it.
The APK Download link for SecHeaders is provided to you by apps112.com without any warranties, representations or guarantees of any kind, so access it at your own risk.
If you have questions regarding this particular app contact the publisher directly. For questions about the functionalities of apps112.com contact us.
