Generators
Building a new site or adding a header for the first time? Generators build the config from scratch. If you have a live site to scan, use the fixer tools instead.
🛡
CSP Generator Build a Content Security Policy by selecting your sources. Outputs header value + Nginx/Vercel config. ⚡
CORS Header Generator Select origin, methods, and headers. Get Nginx, Express, and FastAPI config in one click. 🔒
Security Headers Generator Configure all 9 security headers at once. HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy, and more. 🎛
Permissions-Policy Generator Control camera, microphone, geolocation, payment, and more. Block features you do not use. ⚡
Cache-Control Generator Generate Cache-Control headers for static assets, HTML pages, API responses. Nginx, Vercel, Cloudflare, Express config.
Generators vs Fixers — which to use
| Situation | Use |
|---|---|
| I have a live site and want to see what's missing | HeadersFixer — scans your URL |
| I'm building from scratch and need a starting config | Generators — this page |
| I have a CORS error in the browser console | CORSFixer — live preflight test |
| I need a CSP for a page I haven't deployed yet | CSP Generator |
| My CSP is blocking something on a live page | CSPFixer — scans your URL |