HTTP Strict Transport Security (HSTS) is a security header standard that instructs browsers to only ever connect to a site over HTTPS, protecting against protocol-downgrade and cookie-hijacking attacks on the first request. Our engine detects it through 1 HTTP header check for the `Strict-Transport-Security` response header. Like CSP, this is a security-configuration signal we surface alongside builder/technology detection, not a vendor or platform identification. Reference: MDN's HSTS documentation.
Paste any URL to instantly detect whether it was built with HSTS. Our engine checks 1 technical signals.
HSTS is used across many industries. These are the most common website types built on this platform:
Businesses of all sizes
Fast, reliable site building with professional results
Designers and developers
Powerful tools with minimal setup
Startups
Quick launch with scalable infrastructure
Content creators
Beautiful presentation for your work
Every HSTS website leaves distinctive technical fingerprints. Here's what to look for:
Explore how HSTS compares to similar security tools: