HTTP Header Checker
Fetch any public URL and read back its real HTTP status line and response headers, with security and cache headers highlighted.
Only public URLs, and only ones you are allowed to query. The lookup runs through a free public API because browsers block direct cross-origin header reads.
Result
- Status
- —
- Headers
- —
- Time
- —
How it works
- Browsers block direct cross-origin header reads, so the check runs through a free public header API and the raw reply is parsed here in the page.
- Status, content type, caching and security headers (
strict-transport-security,content-security-policy,x-frame-options…) are highlighted, and missing common security headers are called out. - Requests are plain GETs to public URLs — the lookup API does not support custom methods, request bodies or request headers.