Skip to content
HeaderHawk

HeaderHawk Documentation

HeaderHawk is the endpoint the browser’s security reports go to, and the dashboard over what arrives. Add response headers and browsers start reporting what your policies refused, what scripts ran, and what broke.

Response headers, no agent

Nothing is added to your pages. Add the reporting headers to your responses and browsers post reports directly. Works with nginx, Apache, Node.js and every major platform.

Every report type

CSP violations, integrity and permissions and cross-origin policy violations, deprecated APIs, failed requests and crashes — through the same endpoint.

Readable, grouped violations

Thousands of reports become a short list, each group opening onto the file, line and script sample the browser sent.

Noise filtering

Extension and bot reports are classified as noise and held back, so alerts reflect real problems rather than report volume.

Section titled “Quick Links”