HTTP header checker
Fetch HTTP response headers from any public URL. Shows status code, content type, security headers and caching information.
- Free, no sign-up
- No data stored
- Reviewed 2026-01-15
Your details
Results
About the HTTP Header Checker
Enter a public URL to fetch its HTTP response headers. Review the status code, content type, cache-control directives, security headers (HSTS, CSP, X-Frame-Options) and server information.
How to use the HTTP Header Checker
- Enter a public URL (https://).
- View the response status code and headers.
- Check security headers and caching.
Frequently asked questions
Why does it show a different status than my browser?
The tool makes a server-side request without cookies or authentication. You may see a redirect or 403 that your browser handles transparently.
Can I check localhost URLs?
No. Only publicly accessible URLs are supported for security (SSRF protection).
What security headers should I look for?
At minimum: Strict-Transport-Security, X-Content-Type-Options, X-Frame-Options, Content-Security-Policy and Referrer-Policy.