What is HTTP Header Viewer?
The HTTP Header Viewer inspects HTTP response headers, status codes, server technologies, content types, caching headers, and security configurations (HSTS, CSP, X-Frame-Options).
Audit server headers, verify SSL redirect rules, and inspect performance cache control headers for web applications.
Paste Raw HTTP Response Headers
Security Header Audit
Strict-Transport-Security (HSTS)
max-age=63072000; includeSubDomains; preload
Content-Security-Policy (CSP)
default-src 'self'
X-Frame-Options
DENY
X-Content-Type-Options
nosniff
Referrer-Policy
strict-origin-when-cross-origin
Frequently Asked Questions
What are security response headers?
Headers like Strict-Transport-Security (HSTS), X-Content-Type-Options, and X-Frame-Options harden web applications against attacks.
What does Cache-Control header specify?
Cache-Control defines browser caching policies (max-age, no-cache, s-maxage, immutable).
What is the HTTP 301 vs 302 status code?
301 indicates a permanent redirect, while 302 represents a temporary redirect.
How to use HTTP Header Viewer
To view HTTP headers:
- Enter any web URL into the search bar.
- Click Inspect Headers to send a HEAD/GET request.
- Review status code, security header scores, server info, and raw header lists.