HTTP Headers Checker

HTTP headers are instructions a web server sends with every response: caching, redirects, cookies and security policies. This tool shows the full redirect chain and grades the main security headers.

Tool status: Fully functional Runs entirely on this website or in your browser.

Only public websites on standard ports (80/443) can be checked.

What this tool can and cannot do

Requests come from our server and follow up to 5 redirects. Some sites show different headers to automated requests or block them.

Data sources: Server-side request from our host

Understanding the results

Strict-Transport-Security forces HTTPS. Content-Security-Policy limits which scripts can run. X-Content-Type-Options and Referrer-Policy are simple, recommended hardening headers.

Troubleshooting

  • Most headers can be added in your web server configuration or .htaccess file, or through your CDN.

Frequently asked questions

Is a missing header a vulnerability?

Not by itself, but security headers add defence in depth against common attacks.