HTTP Header Checker
Inspect the HTTP response headers of any URL.
How to Use the HTTP Header Checker?
Inspect the HTTP response headers of any URL, including security and caching headers.
- 1
Enter the URL you want to inspect.
- 2
Click the Check Headers button.
- 3
Review every response header in the table, sorted by name.
- 4
If the URL redirects, switch between hops to see headers at each step.
- 5
Check the Security headers box for missing protections.
Benefits of Using Our HTTP Header Checker
Every header, clearly shown
See server, caching, content type, cookies and more in one table.
Redirect aware
Inspect the headers of each redirect hop, not just the final page.
Security overview
Instantly see which important security headers are present or missing.
One click copy
Copy the full header list to share with your developer or host.
Who Can Use This HTTP Header Checker?
Developers
Debug caching, CORS and content type issues.
SEO specialists
Check X-Robots-Tag and canonical headers.
Security teams
Audit headers like HSTS and Content Security Policy.
Site owners
Confirm compression and caching are switched on.
Frequently Asked Questions
Everything you need to know about the HTTP Header Checker.
What are HTTP headers?
HTTP headers are pieces of information a server sends along with a web page, such as the content type, caching rules, cookies and security policies. Browsers use them to decide how to display, store and protect the page.
Which security headers should my site have?
Common recommendations are Strict-Transport-Security to enforce HTTPS, Content-Security-Policy to limit where scripts can load from, X-Content-Type-Options set to nosniff, X-Frame-Options or a frame-ancestors policy to stop clickjacking, Referrer-Policy and Permissions-Policy.
What is the X-Robots-Tag header?
X-Robots-Tag works like the robots meta tag but is sent as a header. It can tell search engines not to index a page or file, which is useful for PDFs and images. An unexpected noindex here can remove pages from Google.
How do I change my headers?
Headers are set by your web server, hosting control panel, CDN or application. On Apache you can use .htaccess, on Nginx the server configuration, and services like Cloudflare offer header rules in their dashboard.
Related Tools
All Website ToolsWebsite Status Checker
Check if a website is up or down right now.
SSL Certificate Checker
Check SSL certificate issuer, validity and expiry date.
WHOIS Lookup
See who registered a domain, when, and where.
DNS Lookup
Look up A, AAAA, MX, NS, TXT and CNAME records.