analyzer · free · no sign-up
HTTP header inspector
Every response header for a URL, with the security and caching headers explained. Free, no sign-up.
Answers: http header checker · check security headers · see response headers online
What this does not measure
- It shows one response from one location. A CDN may serve a different set of headers to a different region.
- HSTS and CSP are reported as present or absent, not graded. Whether a policy is appropriate for your site depends on what your site does.
- Header names and values are shown as sent. It does not interpret a vendor-specific header it does not recognise.