Web tools

HTTP headers lookup

Get all the HTTP headers that an URL returns for a typical GET request.

Status Code Content-Type Cache-Control HSTS Server X-Frame-Options CSP

What are HTTP Headers?

HTTP headers are key-value pairs sent by the server in its response. They indicate content type, caching rules, security protections (HSTS, CSP, X-Frame-Options) and more. Essential for auditing any web infrastructure.

Header Categories

Security

HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy.

Cache

Cache-Control, ETag, Expires, Last-Modified, Pragma.

Content

Content-Type, Content-Length, Content-Encoding, Content-Language.

Server

Server, X-Powered-By, Via, Age, Date.

Redirect

Location, Refresh — used during 301/302 redirects.

Important Security Headers

  • HSTSStrict-Transport-Security forces HTTPS on all future connections.
  • CSPContent-Security-Policy restricts script sources to prevent XSS attacks.
  • X-FrameX-Frame-Options prevents iframe embedding (clickjacking protection).
  • X-CTOX-Content-Type-Options prevents browser MIME type sniffing.
  • ReferrerReferrer-Policy controls what information is sent in the Referer header.

How to use this tool?

  1. 1Enter the full URL (with https://) in the input field
  2. 2Click submit to send a request to the server
  3. 3Analyze the returned headers: security, cache, server and content

Common Use Cases

  • Check for security headers (HSTS, CSP, X-Frame-Options)
  • Audit cache configuration to optimize performance
  • Identify the server software in use (Apache, Nginx, Cloudflare...)
  • Analyze HTTP redirects and redirect chains
  • Debug encoding or MIME type issues in a response
Similar tools
SSL Lookup

Get all possible details about an SSL certificate.
HTTP/2 Checker

Check whether a website is using the new HTTP/2 protocol or not.
Meta tags checker

Get & verify the meta tags of any website.