HTTP header checker.
See the response headers a public page sends, including each response along its HTTP redirect path. Filter the details and copy what you need.
A closer look at a public URL. Checked by our server, with recent results reused for up to five minutes.
See what the server sends.
Privacy & fair-use limits
Fresh network inspections are limited to 5 per minute, 20 per hour and 40 per day per IP. Cached responses have a separate limit of 60 requests per minute per IP. The authorized signed-in owner has a separate 100 fresh inspections/day allowance; the shared service limit is 1,000 per day. Your URL is sent to our server; it is not added to browser history or a public report. We do not forward credentials, and recognized sensitive header values are redacted. Avoid private links or URLs containing secrets. Data handling details
Declarations, not a security score.
After you inspect a URL, the map shows selected declarations from its final HTTP response. Their presence does not grade the site.
- Security declarations
Shows selected transport, content, referrer and permissions policy headers when observed.
- Cache declarations
Shows cache directives and validators returned by the response.
- Compression declaration
Shows Content-Encoding when the server returns it.
One server request
This is a server request, not a browser. It does not run JavaScript, load assets, or include browser cookies and login state.
HTTP redirects only
We follow bounded HTTP response redirects. JavaScript navigation and HTML meta refresh are not followed.
Public pages only
Credentials are not sent. Private or restricted destinations are blocked, and sensitive response header values are redacted.
How to use the header checker.
- Enter a public HTTP or HTTPS page address and choose Inspect.
- Review the HTTP status, observed response time, and headers for the final response.
- Expand earlier response hops to compare their headers; filter the list or copy it for review.
Header values can vary by region, request method, CDN, and time. This bounded GET check does not represent a browser session or an origin-only measurement. See also the HTTP redirect checker page weight budget, and hosting checker for DNS, hosting and CDN clues.
Why do some values say redacted?
Cookies, authentication details, and token-like header values can expose private information. The service redacts sensitive values before returning results.
Does this show headers from every visitor request?
No. This is one server-side GET request. Browsers send different request headers, follow client-side navigation, and may receive different responses from caches or regional servers.
Are results stored?
The URL and result are not written to a persistent database by this tool. Results may be held in server memory for up to five minutes to reuse recent checks. Infrastructure logs may still exist.