HSTS Checker

Check HTTP Strict Transport Security header

PRELOAD ELIGIBLE

Strict-Transport-Security Header

Header Value:

Parsed Directives:

Max Age

730 Days

Subdomains

YES

Preload

YES

Server Config Snippets

Ready for submission to hstspreload.org browser list

add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always;

header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload"

// next.config.js
module.exports = {
  async headers() {
    return [
      {
        source: '/:path*',
        headers: [
          {
            key: 'Strict-Transport-Security',
            value: 'max-age=63072000; includeSubDomains; preload',
          },
        ],
      },
    ]
  },
}