ControlCurrentbrowser security planning
No website scan or upload

Check security information you have already collected

Paste a set of response headers, or load a structured evidence file covering several pages. ControlCurrent checks whether expected browser protections appear and whether the supplied pages disagree. Everything is analysed on this device. It does not visit your website or prove that the protections work in production.

Simple check

Review one set of website response headers

Response headers are instructions a website sends to the browser. Paste a set below and ControlCurrent will look for recognised security settings. It does not visit the URL, save the text, or send it anywhere. Replace cookie values and other secrets with REDACTED first.

Paste response headers only. Login credentials such as Authorization and Cookie are refused. If redirects produced several blocks, only the final response is checked.

Advanced: review evidence from several pages and signed reportsUse this only when you already have a structured evidence file or an approved CI report.
Advanced check

Review evidence from several pages

Load a structured JSON file when you need to compare headers, page markup, local resource checks, request information, or passkey settings across several parts of an application. ControlCurrent analyses the file on this device without running the markup or loading its resources. The exported report leaves out the original page content and resource bytes.

Or paste and edit JSON

Use non-identifying labels instead of URLs or personal data. Remove secrets, route locations, unnecessary page content, passkey challenges, user IDs, and relying-party IDs before loading the file.