Skip to content

Free HTTP Header Checker

See every HTTP response header a URL returns, and check the ones that matter: caching, compression, indexing and security.

  • Free, no sign-up
  • Reads public pages only
  • Updated Oct 25, 2026
Try:Checks:StatusSecurityCachingCompressionX-Robots-Tag

How to use the HTTP header checker

  1. 1

    Paste a URL

    A page, an image, an API endpoint.

  2. 2

    Read the headers

    All of them, plus checks on the important ones.

  3. 3

    Harden and speed up

    Add missing security and caching headers.

Headers worth checking

Security: Strict-Transport-Security forces HTTPS; Content-Security-Policy limits what can run; X-Content-Type-Options stops type sniffing; X-Frame-Options or frame-ancestors stops clickjacking; Referrer-Policy controls what is leaked.

Speed and SEO: Cache-Control and compression (gzip, br, zstd) affect speed; X-Robots-Tag can noindex a page from the header, which is easy to miss.

Questions

Does it follow redirects?

It shows the headers of the URL you enter; use the redirect checker to trace a chain.

What is X-Robots-Tag?

A header version of the robots meta tag. noindex here removes the page from search.

Which security headers are essential?

HSTS, X-Content-Type-Options and a frame policy are easy wins; a Content-Security-Policy takes more care.

Are cookies shown?

Set-Cookie headers are shown with values hidden.

All free tools

Launch your startup on Aback Launch

Get a launch page that search engines and AI assistants can read, a place in the weekly launch list, and a review by a real person. Free to join.