Did AI remove my security headers?

Short answer: check the headers your live site sends against your config.

AI coding tools check that the code runs. They don't check what the live site serves. So a change can pass every test and still break the site, and the AI reports the job as done. An AI rewriting your server or host config can drop them without saying so.

How to check it yourself

1. Open your site, then the browser's developer tools, Network tab, and click the page.
2. Look for Strict-Transport-Security, Content-Security-Policy, X-Content-Type-Options and Referrer-Policy.
3. Compare with your config file. Check the newest change first.

What Preventionlabs shows

Preventionlabs checks your security headers and Content Security Policy, and how strict that policy is. Each report lists problems first, with the evidence and what to do, and shows what changed since the last report.

Give your AI agent the Preventionlabs MCP server and it runs the same check itself after it deploys.

Price

First report free, no card needed. Then A$50 a month, up to 10 domains.

Run your first report free

More questions it answers

• Did AI add noindex to my site?
• AI broke my redirect. How do I find it?
• Did AI break my website?
• All questions