What are security headers?

Headers like Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, and X-Content-Type-Options that protect against MITM, XSS, clickjacking, and MIME sniffing.

Why is content-security-policy missing?

Many sites don't set a CSP — it's powerful but hard to configure. Implementing it is one of the highest-impact security upgrades for a web app.

Does this follow redirects?

No — it deliberately shows the first response so you can see the redirect headers. Use the Redirect Chain Checker to walk a full chain.

Utilities Tool

HTTP Headers Checker

Send a GET or HEAD request to any URL and inspect the full response headers.

Privacy-first workflows

Fast and simple

100% Free, no signup

URL

Method

How it works

How to inspect HTTP headers

STEP 01

Enter a URL.

STEP 02

Pick GET (full request) or HEAD (headers only, faster).

STEP 03

Review the status code, security header report, and full header list.

You might also need

Related tools

Utilities

WHOIS / RDAP Lookup

Find domain registrar, status, nameservers, registration date, and expiry.

Use now

Utilities

SSL Certificate Checker

Inspect an HTTPS site's TLS certificate — issuer, validity, expiry, SAN list, cipher.

Use now

Utilities

Redirect Chain Checker

Follow URL redirects step by step and see every hop with status code and timing.

Use now

Utilities

IP Lookup (What is my IP)

Find your public IP — or look up any IP — for city, country, ASN, ISP, and reverse DNS.

Use now

Utilities

Broken Link Checker

Scan any page, extract its links, and HEAD-check each one for 4xx / 5xx errors.

Use now

Utilities

Rent Receipt Generator

Generate print-ready rent receipts for HRA claims — bulk months, PAN and revenue-stamp rules included.

Use now

FAQ

HTTP Headers Checker

How to inspect HTTP headers

Related tools

Common questions