HTTP Headers Checker
Inspect the HTTP response headers for any URL including security headers, caching and content type.
Frequently asked questions
What security headers should I look for?
Key security headers: Strict-Transport-Security (HSTS), Content-Security-Policy (CSP), X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy. Missing headers leave your site vulnerable to various attacks.
What does Cache-Control mean?
Cache-Control tells browsers and CDNs how long to cache a resource. max-age=3600 means cache for 1 hour. no-cache means revalidate before using. no-store means never cache.