Ironline Security · last updated 2026-06-18
headAnalyzer does not collect, transmit, or store your email or its headers. All parsing and analysis happen entirely on your device — inside the Outlook task pane (a sandboxed web view) or your browser. No header content, message content, or analysis result leaves the client.
headanalyzer.ironlinesec.com serves only the add-in's static files (HTML, CSS,
JavaScript, icons, and the manifest). Loading those files produces ordinary web-server access
logs (timestamp, IP, requested file) at the hosting provider, as any website does. Those logs
contain no email data.
The add-in requests Outlook's ReadItem permission so it can read the current
message's internet headers via the Office JavaScript API. It does not read other mailboxes,
send mail, or modify messages.
The task pane loads Microsoft's Office.js runtime from Microsoft's CDN (required for any Outlook add-in). headAnalyzer includes no analytics, tracking, or advertising, and makes no automatic network calls with your header data.
External lookup links are one exception, and only when you click them: the Summary tab offers optional links to third-party reputation/DNS tools (MXToolbox, VirusTotal, AbuseIPDB, Cisco Talos, who.is). Clicking one opens that service in a new window and shares the single domain or IP address being looked up with it — subject to that provider's own privacy policy. No message content is ever included.
Live blocklist check is the other exception, and only when you press
the "Check blocklists" button: headAnalyzer queries DNS blocklists over DNS-over-HTTPS,
which sends the message's source IP address (only) to a public DNS resolver
(dns.google) and to the queried blocklist operators. Nothing runs automatically;
no check is performed unless you click, and no message content is transmitted.
Questions: github.com/ironlinesec/headAnalyzer.