Security Headers Generator
Generate privacy-first HTTP security headers, CSP rules, HSTS, and Cloudflare Pages _headers output locally.
Security headers workspace
Generate a Cloudflare _headers file with security headers.
Options
Generated headers
Copy into a Cloudflare Pages _headers file, then test the site.
Output
Questions
Can I use these headers on Cloudflare Pages?
Yes. Copy the generated _headers output into a Cloudflare Pages project and test the deployed site before relying on it.
What is the difference between balanced and strict?
Balanced allows common static-site needs such as inline styles and optional Cloudflare Web Analytics. Strict removes inline allowances and can require code changes.
Can a CSP break my site?
Yes. Content Security Policy can block scripts, styles, images, analytics, or embeds if the policy is too strict. Test important pages after deploying.
Does Utilumo upload my input?
No. Utilumo has no backend that could receive your input. Where a tool makes a request as part of its function, it goes directly from your browser to the destination you choose, never through Utilumo.
Do I need an account?
No. Utilumo tools are built to work without accounts or sign-in.