HTTP Headers

Parse header blocks

Frequently Asked Questions

What does the HTTP Headers Checker do?
Enter any URL and the tool fetches all HTTP response headers from that website. It analyzes security headers and shows which ones are properly configured, missing, or need attention.
What security headers are checked?
The tool checks: Strict-Transport-Security (HSTS), Content-Security-Policy (CSP), X-Frame-Options, X-Content-Type-Options, X-XSS-Protection, Referrer-Policy, and Permissions-Policy. Each header gets a status: good, warning, or missing.
Are results cached?
Yes, results are cached for 5 minutes to reduce server load. If you check the same domain again within 5 minutes, you'll see cached results instantly.