Skip to content

HTTP Header Checker

Paste any URL to inspect the headers its server sends back: content type, crawler directives, HSTS, caching and framing protections. Missing security headers leave the site exposed; wrong caching headers slow repeat visits.

Enter a URL to begin

Results appear here — nothing is stored.

What this check covers

  • Content-Type
  • X-Robots-Tag
  • HSTS
  • Cache-Control
  • Content-Security-Policy
  • X-Frame-Options
  • Referrer-Policy
  • Page status
  • Final URL

How it works

  1. 01

    Paste the site URL

    Enter any publicly reachable URL and run the check.

  2. 02

    Read each header row

    Content type, crawler, security and caching headers each get their own row.

  3. 03

    Tighten the config

    Add missing protections and sensible caching, then re-run to confirm the headers.

Common questions

What are http security headers?

Response headers that switch on browser protections against framing, downgrade and script-injection attacks.

Is the http header checker free?

Yes. Inspect any public URL with no account and nothing to install.

What is HSTS?

A header that forces browsers to use HTTPS, blocking downgrade attacks on your site.

How do caching headers help?

They tell browsers how long to reuse files, making repeat visits faster and cutting server load.

What does the X-Robots-Tag header do?

It applies crawling rules at the server level, useful for files such as PDFs that have no HTML.

Related tools

See all tools

Track your site visitors with Traffsite Web Analytics

Start free