HTTP Header Checker — Inspect Response Headers

Inspect the HTTP response headers of any URL in real time. Our free HTTP header checker shows the status code, server banner, content type, cache policy, security headers (HSTS, CSP, X-Frame-Options), redirect chain, and cookies — essential for debugging caching, SEO, and security configuration.

What HTTP headers reveal

Server software (Nginx, Apache, LiteSpeed, Cloudflare), CDN in use, cache directives, content-type, compression (gzip, br), cookies, HSTS, CSP, X-Frame-Options, X-Content-Type-Options, and Referrer-Policy. Together they paint a complete picture of how a server responds.

Why check security headers

Missing HSTS leaves users vulnerable to TLS downgrade. Missing CSP enables XSS. Missing X-Frame-Options allows clickjacking. Mozilla Observatory grades security headers; our checker is the quickest way to spot what is missing.

Redirect chains and SEO

Each 301 hop loses a tiny amount of link equity and adds latency. Check that your domain redirects in a single hop (apex → www → https, ideally combined) and that no temporary 302 sits where a 301 should be.

Security headers worth setting on every site
HeaderPurposeRecommended value
Strict-Transport-SecurityForce HTTPSmax-age=31536000; includeSubDomains
Content-Security-PolicyBlock XSSStrict source allow-lists
X-Frame-OptionsPrevent clickjackingDENY or SAMEORIGIN
X-Content-Type-OptionsStop MIME sniffingnosniff
Referrer-PolicyLimit referrer leakagestrict-origin-when-cross-origin
Permissions-PolicyRestrict APIscamera=(), microphone=()

Frequently Asked Questions

What does the HTTP header checker show?

Status code, all response headers, redirect chain, cookies, and a summary of present/missing security headers.

Why is my redirect doing two hops?

Usually because the apex redirects to www first, then to HTTPS. Configure both at once at the edge to keep it a single 301.

How do I add HSTS?

Set the Strict-Transport-Security header at your web server or CDN. Start with a low max-age and raise it once stable.

Is the HTTP header tool free?

Yes — free, unlimited, no signup.

Try Hostinger — fast hosting from $2.99/mo