Enter a URL to see its response status, content type, server, cache and security headers, cookies and the full list of response headers.

The HTTP Header Checker fetches any URL and shows its full HTTP response: status code, content type, server, cache headers, cookies and security headers such as HSTS, Content-Security-Policy and X-Frame-Options.
HTTP response headers are metadata a server returns with a page - such as the status code, content type, caching rules, cookies and security policies - that describe how the response should be handled.
It surfaces headers like Strict-Transport-Security (HSTS), Content-Security-Policy (CSP), X-Frame-Options, X-Content-Type-Options, Referrer-Policy and Permissions-Policy, among others.