Analyze HTTP response headers from any URL. Check security headers, caching policies, and CORS configuration.
⚠️ Note: Due to browser CORS restrictions, this tool uses a public proxy to fetch headers. For sensitive URLs, use
curl -I https://example.com in your terminal instead.
Important Security Headers
| Header | Purpose |
|---|---|
Strict-Transport-Security | Forces HTTPS |
Content-Security-Policy | Prevents XSS attacks |
X-Content-Type-Options | Prevents MIME sniffing |
X-Frame-Options | Prevents clickjacking |
Referrer-Policy | Controls referrer data |
Permissions-Policy | Restricts browser APIs |
Command Line Alternative
For the most accurate results, use curl:
curl -I https://example.com