Full HTTP security header audit — CSP, HSTS, CORS, SRI, and 15+ checks with live DevTools panel
Users
6
−2 in 30 days
Rating
0.0 / 5
unchanged in 30 days
Ratings
0
0 in 30 days
Store rank
#237K
#198K among extensions
Version
1.0.0
updated 23 May 2026
Users
monthly, 5 months
Latest, 16 Oct 2026:6 usersMove the mouse over the chart for any month
Ratings count
monthly, 5 months
Latest, 16 Oct 2026:0 ratingsMove the mouse over the chart for any month
The Chrome Web Store rounds user counts down to the leading digit, so the user line moves in steps. The ratings count is exact and is the better signal of real adoption.
About SecLens
SecLens audits the HTTP security headers of any website you visit — instantly, in your browser.
Open the popup for a quick summary, or the DevTools panel (F12 → SecLens) for a full real-time breakdown as the page loads.
Checks include:
- Content Security Policy (CSP) — parsed and evaluated using Google's csp-evaluator library
- HSTS — max-age, includeSubDomains, preload
- CORS misconfiguration detection
- Subresource Integrity (SRI) — grouped by registered domain
- X-Content-Type-Options, X-Frame-Options
- Referrer-Policy, Permissions-Policy
- COOP, COEP, CORP
- Cache-Control on API responses
- Tech stack info disclosure (Server header)
- Report-Only CSP detection
- Multiple conflicting CSP headers
Built for developers and security engineers who want instant visibility into a site's header posture without opening Burp or running a separate scanner.
No data leaves your browser. No accounts. No tracking.