Alternatives to HTTP Observatory
Mozilla's web tool that grades a site's HTTP security headers and gives fix recommendations. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
HTTP Observatory
Mozilla's web tool that grades a site's HTTP security headers and gives fix recommendations.
Replacements
Listings that take over the same core job as HTTP Observatory.
Security Headers
A web service that analyses a site's HTTP response headers and grades them from A+ to F.
Security Headers gives a similar A+ to F grade for response headers and adds an API, but scans appear in a public recent list unless you choose to hide them.
Webbkoll
A web-based privacy checker for cookies, third-party requests, HTTPS and security headers.
Webbkoll checks security headers together with cookies, third-party requests and HTTPS redirects, is run by a non-profit and publishes its source code on Codeberg.
Hardenize
A web site configuration tester and monitoring service for network, certificate and security settings.
Hardenize produces a broader public configuration report covering network, certificate and security settings, and offers continuous monitoring aimed at organisations.
Internet.nl
A web test that checks websites, mail domains and connections for modern Internet standards support.
Internet.nl tests a domain against a wider set of standards such as IPv6, DNSSEC and TLS, and can also be self-hosted with Docker.
Web Check
Open-source, self-hostable tool that analyses a website's DNS, security, headers and other public details.
Web Check is open source and self-hostable with Docker, reporting headers alongside DNS and other security details in one broader overview.
Similar software
Related functionality, not a direct replacement.
CSP Evaluator
A Google web tool that checks whether a Content Security Policy mitigates cross-site scripting.
Csper CSP Evaluator
An online evaluator that analyses the directives in a Content-Security-Policy header.
HSTS Preload List Submission
A web tool to check a domain's HSTS preload status and submit it for inclusion.
SSL Labs Server Test
A Qualys web service that analyses the TLS/SSL configuration of a public web server.
Sucuri SiteCheck
Free remote scanner that checks a website for visible malware, blocklisting and outdated software.
Check Your Website
Free online checker for a domain's DNS, redirects, certificates, connections and mixed content.
