~/home / header ranking

Header ranking.

How well do 98 well-known websites set their security headers? One request per site, the same grading as our free checker, as of 5 November 2026.

AllGermany Italy Banks

98sites checked

64 %without an effective CSP

7with grade A

60median score

64% of the sites send no effective CSP, the biggest lever.

Grade distribution

A 7B 21C 30D 22F 18

Rank	Website	Score	HSTS	CSP	nosniff	Frame	Referrer	Permissions	COOP	No leak
1	Aaruba.it	100	HSTS: set	CSP: set	nosniff: set	Frame: set	Referrer: set	Permissions: set	COOP: set	No leak: set	Check live
2	Amediaworld.it	100	HSTS: set	CSP: set	nosniff: set	Frame: set	Referrer: set	Permissions: set	COOP: set	No leak: set	Check live
3	Agov.uk	95	HSTS: set	CSP: set	nosniff: set	Frame: set	Referrer: set	Permissions: set	COOP: missing or too weak	No leak: set	Check live
4	Atg24.sky.it	95	HSTS: set	CSP: set	nosniff: set	Frame: set	Referrer: set	Permissions: set	COOP: missing or too weak	No leak: set	Check live
5	Afacebook.com	90	HSTS: set	CSP: set	nosniff: set	Frame: set	Referrer: missing or too weak	Permissions: set	COOP: set	No leak: set	Check live
6	Ainstagram.com	90	HSTS: set	CSP: set	nosniff: set	Frame: set	Referrer: missing or too weak	Permissions: set	COOP: set	No leak: set	Check live
7	Awhatsapp.com	90	HSTS: set	CSP: set	nosniff: set	Frame: set	Referrer: missing or too weak	Permissions: set	COOP: set	No leak: set	Check live
8	B1und1.de	85	HSTS: set	CSP: set	nosniff: set	Frame: set	Referrer: set	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
9	Bamazon.de	85	HSTS: set	CSP: set	nosniff: set	Frame: set	Referrer: missing or too weak	Permissions: set	COOP: missing or too weak	No leak: set	Check live
10	Bbund.de	85	HSTS: set	CSP: set	nosniff: set	Frame: set	Referrer: set	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
11	Bfastweb.it	85	HSTS: set	CSP: set	nosniff: set	Frame: set	Referrer: set	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
12	Bgithub.com	85	HSTS: set	CSP: set	nosniff: set	Frame: set	Referrer: set	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
13	Bhetzner.com	85	HSTS: set	CSP: set	nosniff: set	Frame: set	Referrer: set	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
14	Bt-online.de	85	HSTS: set	CSP: set	nosniff: set	Frame: set	Referrer: set	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
15	Bstripe.com	80	HSTS: set	CSP: set	nosniff: set	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: set	No leak: set	Check live
16	Btiktok.com	80	HSTS: set	CSP: set	nosniff: set	Frame: set	Referrer: set	Permissions: missing or too weak	COOP: missing or too weak	No leak: missing or too weak	Check live
17	Bvodafone.it	80	HSTS: set	CSP: set	nosniff: set	Frame: set	Referrer: set	Permissions: missing or too weak	COOP: missing or too weak	No leak: missing or too weak	Check live
18	Bcloudflare.com	75	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: set	Permissions: set	COOP: set	No leak: set	Check live
19	Bconsorsbank.de	75	HSTS: set	CSP: set	nosniff: set	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
20	Bdeutschebahn.com	75	HSTS: set	CSP: set	nosniff: set	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
21	Bfaz.net	75	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: set	Permissions: set	COOP: set	No leak: set	Check live
22	Bmps.it	75	HSTS: set	CSP: set	nosniff: set	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
23	Bopenai.com	75	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: set	Permissions: set	COOP: set	No leak: set	Check live
24	Botto.de	75	HSTS: set	CSP: set	nosniff: set	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
25	Brewe.de	75	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: set	Permissions: set	COOP: set	No leak: set	Check live
26	Bspotify.com	75	HSTS: set	CSP: set	nosniff: set	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
27	Btim.it	75	HSTS: set	CSP: set	nosniff: set	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
28	Bwelt.de	75	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: set	Permissions: set	COOP: set	No leak: set	Check live
29	Cbper.it	70	HSTS: set	CSP: set	nosniff: set	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: missing or too weak	Check live
30	Cdeutsche-bank.de	70	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: set	Permissions: set	COOP: missing or too weak	No leak: set	Check live
31	Cgmx.net	70	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: set	Permissions: set	COOP: missing or too weak	No leak: set	Check live
32	Cpostbank.de	70	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: set	Permissions: set	COOP: missing or too weak	No leak: set	Check live
33	Csparkasse.de	70	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: set	Permissions: set	COOP: missing or too weak	No leak: set	Check live
34	Cweb.de	70	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: set	Permissions: set	COOP: missing or too weak	No leak: set	Check live
35	Cagid.gov.it	65	HSTS: missing or too weak	CSP: set	nosniff: set	Frame: set	Referrer: set	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
36	Cansa.it	65	HSTS: set	CSP: set	nosniff: missing or too weak	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
37	Cdropbox.com	65	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: set	Permissions: missing or too weak	COOP: set	No leak: set	Check live
38	Cionos.de	65	HSTS: set	CSP: set	nosniff: missing or too weak	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
39	Clinkedin.com	65	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: missing or too weak	Permissions: set	COOP: set	No leak: set	Check live
40	Cmozilla.org	65	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: set	Permissions: missing or too weak	COOP: set	No leak: set	Check live
41	Cspiegel.de	65	HSTS: set	CSP: set	nosniff: missing or too weak	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
42	Csueddeutsche.de	65	HSTS: set	CSP: set	nosniff: missing or too weak	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
43	Cx.com	65	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: set	Permissions: missing or too weak	COOP: set	No leak: set	Check live
44	Cyoutube.com	65	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: missing or too weak	Permissions: set	COOP: set	No leak: set	Check live
45	Cbild.de	60	HSTS: set	CSP: set	nosniff: set	Frame: missing or too weak	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
46	Ccomdirect.de	60	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: set	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
47	Ccommerzbank.de	60	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: set	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
48	Cdhl.de	60	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: set	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
49	Cn26.com	60	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: missing or too weak	Permissions: set	COOP: missing or too weak	No leak: set	Check live
50	Cnextcloud.com	60	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: set	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
51	Cpaypal.com	60	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: missing or too weak	Permissions: set	COOP: missing or too weak	No leak: set	Check live
52	Ctagesschau.de	60	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: missing or too weak	Permissions: set	COOP: missing or too weak	No leak: set	Check live
53	Ctargobank.de	60	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: set	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
54	Cvodafone.de	60	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: set	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
55	Czalando.de	60	HSTS: set	CSP: set	nosniff: missing or too weak	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: missing or too weak	Check live
56	Cheise.de	55	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: set	No leak: set	Check live
57	Ckaufland.de	55	HSTS: missing or too weak	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: set	Permissions: set	COOP: set	No leak: set	Check live
58	Czeit.de	55	HSTS: missing or too weak	CSP: set	nosniff: set	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
59	Dagenziaentrate.gov.it	50	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
60	Dapple.com	50	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
61	Dbancobpm.it	50	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
62	Dbbc.com	50	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
63	Ddkb.de	50	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
64	Deuropa.eu	50	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
65	Dinps.it	50	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
66	Dlidl.de	50	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
67	Dmediolanum.com	50	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
68	Dnetflix.com	50	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
69	Dnytimes.com	50	HSTS: set	CSP: missing or too weak	nosniff: missing or too weak	Frame: set	Referrer: missing or too weak	Permissions: set	COOP: missing or too weak	No leak: set	Check live
70	Dreddit.com	50	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
71	Dusa.gov	50	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
72	Dfineco.it	45	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: missing or too weak	Check live
73	Diliad.it	45	HSTS: missing or too weak	CSP: set	nosniff: missing or too weak	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
74	Drai.it	45	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: missing or too weak	Referrer: set	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
75	Dintesasanpaolo.com	40	HSTS: set	CSP: missing or too weak	nosniff: missing or too weak	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
76	Dmediamarkt.de	40	HSTS: set	CSP: missing or too weak	nosniff: missing or too weak	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
77	Dregister.it	40	HSTS: set	CSP: missing or too weak	nosniff: missing or too weak	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
78	Dbundesregierung.de	35	HSTS: set	CSP: missing or too weak	nosniff: set	Frame: missing or too weak	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
79	Dstrato.de	35	HSTS: set	CSP: missing or too weak	nosniff: missing or too weak	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: missing or too weak	Check live
80	Dtelegram.org	35	HSTS: set	CSP: missing or too weak	nosniff: missing or too weak	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: missing or too weak	Check live
81	Fanthropic.com	30	HSTS: missing or too weak	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
82	Flastampa.it	30	HSTS: missing or too weak	CSP: set	nosniff: missing or too weak	Frame: missing or too weak	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
83	Fovhcloud.com	30	HSTS: missing or too weak	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
84	Frepubblica.it	30	HSTS: missing or too weak	CSP: set	nosniff: missing or too weak	Frame: missing or too weak	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
85	Ftrenitalia.com	30	HSTS: missing or too weak	CSP: missing or too weak	nosniff: set	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
86	Febay.de	25	HSTS: set	CSP: missing or too weak	nosniff: missing or too weak	Frame: missing or too weak	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
87	Ftelekom.de	25	HSTS: set	CSP: missing or too weak	nosniff: missing or too weak	Frame: missing or too weak	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
88	Fgoogle.com	20	HSTS: missing or too weak	CSP: missing or too weak	nosniff: missing or too weak	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
89	Fwikipedia.org	20	HSTS: set	CSP: missing or too weak	nosniff: missing or too weak	Frame: missing or too weak	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: missing or too weak	Check live
90	Fcorriere.it	15	HSTS: missing or too weak	CSP: missing or too weak	nosniff: missing or too weak	Frame: missing or too weak	Referrer: missing or too weak	Permissions: set	COOP: missing or too weak	No leak: set	Check live
91	Fdigitalocean.com	15	HSTS: missing or too weak	CSP: missing or too weak	nosniff: missing or too weak	Frame: set	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: missing or too weak	Check live
92	Fposte.it	15	HSTS: missing or too weak	CSP: missing or too weak	nosniff: set	Frame: missing or too weak	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
93	Fhypovereinsbank.de	5	HSTS: missing or too weak	CSP: missing or too weak	nosniff: missing or too weak	Frame: missing or too weak	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
94	Fmicrosoft.com	5	HSTS: missing or too weak	CSP: missing or too weak	nosniff: missing or too weak	Frame: missing or too weak	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
95	Fsubito.it	5	HSTS: missing or too weak	CSP: missing or too weak	nosniff: missing or too weak	Frame: missing or too weak	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
96	Funicredit.it	5	HSTS: missing or too weak	CSP: missing or too weak	nosniff: missing or too weak	Frame: missing or too weak	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
97	Fwindtre.it	5	HSTS: missing or too weak	CSP: missing or too weak	nosniff: missing or too weak	Frame: missing or too weak	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: set	Check live
98	Filsole24ore.com	0	HSTS: missing or too weak	CSP: missing or too weak	nosniff: missing or too weak	Frame: missing or too weak	Referrer: missing or too weak	Permissions: missing or too weak	COOP: missing or too weak	No leak: missing or too weak	Check live

And your website?

In ten seconds you know which grade your site would get.

A badge for your siteAfter the check, the header checker gives you a live badge with your grade, ready to embed in a README or website.

How we measured

One HTTPS request per domain to the start page (up to three redirects); only the response headers are read. Points: CSP 25, HSTS 20, frame protection 15, nosniff, Referrer-Policy and Permissions-Policy 10 each, COOP and “no leak” 5 each. Grade A from 90, B from 75, C from 55, D from 35, otherwise F.

Reading it fairly

This is a snapshot of the start page. Headers can differ by path, region or client, and a low grade does not mean a service is insecure: large providers often protect things elsewhere, for example on separate sign-in domains. The list only scores these eight headers.

Starter set for nginx and the two most common mistakes →

← Home