What are security headers?

Headers like Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, and X-Content-Type-Options that protect against MITM, XSS, clickjacking, and MIME sniffing.

Why is content-security-policy missing?

Many sites don't set a CSP — it's powerful but hard to configure. Implementing it is one of the highest-impact security upgrades for a web app.

Does this follow redirects?

No — it deliberately shows the first response so you can see the redirect headers. Use the Redirect Chain Checker to walk a full chain.

Utilities Tool

HTTP Headers Checker

Send a GET or HEAD request to any URL and inspect the full response headers.

Privacy-first workflows

Fast and simple

100% Free, no signup

URL

Method

How it works

How to inspect HTTP headers

STEP 01

Enter a URL.

STEP 02

Pick GET (full request) or HEAD (headers only, faster).

STEP 03

Review the status code, security header report, and full header list.

You might also need

Related tools

Utilities

Password Generator

Create strong random passwords with letters, numbers, and symbols.

Use now

Utilities

Invoice Generator

Create invoices with automatic amount, GST, discount, and total calculation.

Use now

Utilities

Credit Card Number Generator

Generate dummy Luhn-valid credit card numbers for testing and QA.

Use now

Utilities

Coin Toss Generator

Flip a virtual coin with a simple 50/50 Heads or Tails result.

Use now

FAQ

HTTP Headers Checker

How to inspect HTTP headers

Related tools

Common questions