← All text tools

HTTP headers checker

See every response header of a page and get a security headers grade with fixes.

  • Free
  • No sign-up
  • Works on any device

About HTTP headers checker

See every response header a server sends for a page, such as content type, caching and cookies, and get a security grade. It checks headers like Strict-Transport-Security, Content-Security-Policy and X-Content-Type-Options, and suggests fixes for missing ones.

How to use HTTP headers checker

  1. Type the full address of the page, starting with https.
  2. Run the check to fetch the response.
  3. Read the headers and the security grade with the suggested fixes.

Why use this tool?

Also known as

Frequently asked questions

Which security headers matter most?

Strict-Transport-Security forces HTTPS, Content-Security-Policy limits script sources, and X-Content-Type-Options stops type sniffing. Add these first, then consider Referrer-Policy and Permissions-Policy.

What does the security grade measure?

It looks for important security headers such as HSTS and content security policy, and gives a score based on which are present. Missing ones come with suggestions.

Why do headers sometimes differ from my browser's view?

Servers can answer differently by browser, location or login state. The headers you see here come from a request made by this tool, which may differ from a logged-in browser.

Is HTTP headers checker free?

Yes. HTTP headers checker on Toolipedia is free to use, with no sign-up and no watermark.

Is it safe to use?

Yes. Only what you enter is sent to our server to run the tool, and nothing is saved.

Does it work on my phone?

Yes. It works in any modern browser on Android and iPhone, as well as on tablets and computers. There's nothing to install.

Do I need an account?

No. Just open the page and use the tool. There's no sign-up and no email needed.

Related tools