Note: Due to browser CORS restrictions, this tool checks the headers of pages loaded via the browser’s fetch API. Some headers may not be visible. For complete headers, use a server-side tool or curl.
The Best Free HTTP Header Checker
HTTP headers are invisible metadata sent by a web server with every response. They control caching, security, content encoding, and more. The GadgetsFocus free HTTP Header Checker lets you inspect the response headers of any website and check for missing security headers.
What We Check
- All Response Headers: Content-Type, Cache-Control, Server, etc.
- Strict-Transport-Security (HSTS): Forces HTTPS connections.
- X-Content-Type-Options: Prevents MIME-type sniffing.
- X-Frame-Options: Protects against clickjacking.
- Content-Security-Policy (CSP): Controls resource loading.
- Referrer-Policy: Controls referrer information sharing.