HTTP Header Analyzer

Inspect response headers for a public URL and review security, cache, compression, and robots signals.

Quick samples

Inspect a public URL

Fetch response headers on the server, score core security coverage first, and keep cache, compression, and robots signals in the same report.

Accepts public HTTP or HTTPS URLs only. Private networks and localhost are blocked.

Turn this on to follow the last response from the exact URL you enter.

Response summary

Review the security verdicts, response target, and transport signals first.

No headers inspected yet

Submit a public URL to fetch response headers, security checks, and supporting transport diagnostics.

Documentation

HTTP Header Analyzer

Full Docs

About this tool

HTTP Header Analyzer inspects response headers for a public URL, with security checks first and cache, compression, redirect, and robots signals included. Use it for launch QA and response triage.

Modes

Final-response mode follows redirects and inspects the response users and crawlers reach.

First-hop mode inspects the original URL response before redirects settle.

Input rules

Enter a public HTTP or HTTPS URL. Localhost, private networks, and internal destinations are blocked during fetch validation.

info

Gotchas

Redirects can change the header set. Check both first-hop and final-response modes when diagnosing launch or security issues.

Warnings are a baseline, not a full security review.

tips_and_updates

Key use cases

  • -Review HSTS, CSP, framing, referrer, and permissions headers.
  • -Inspect the final response after redirects.
  • -Check the first redirect hop separately.
  • -Confirm cache, compression, and robots directives.

FAQ