HTTP Headers Checker
Fetch public HTTPS responses and analyze security headers with heuristic grading.
Enter an HTTPS URL to analyze response and security headers.
How to use
- Enter an https:// URL.
- Choose HEAD or GET.
- Review Response Headers and Security Analysis tabs.
Examples
HSTS review
Confirm Strict-Transport-Security max-age and includeSubDomains if expected.
CSP audit
Look for unsafe-inline or missing CSP on HTML responses.
HTTPS only. Response bodies truncated for GET. Grade is heuristic, not certification.
FAQ
- Do you follow redirects?
- Yes, up to five HTTPS redirects with validation on each hop.
- Is grade A a guarantee?
- No. It reflects selected headers only.