Skip to content
HQ8T

HTTP Header Checker

Response headers, redirect chain and security headers.

How to use

  1. 1Enter a URL or domain.
  2. 2Tap Check headers.
  3. 3See each redirect with its status code and time.
  4. 4Review the security header checklist and the full header list.

Frequently asked questions

What does it show?

Every hop in the redirect chain with its status code and response time, then all response headers of the final URL.

Which security headers matter?

Strict-Transport-Security, Content-Security-Policy, X-Content-Type-Options, X-Frame-Options (or CSP frame-ancestors), Referrer-Policy and Permissions-Policy.

Why do I see 301 or 302?

301 is a permanent redirect (best for SEO when moving pages), 302 and 307 are temporary, and 308 is permanent while keeping the request method.

Why might headers differ from my browser?

Servers can vary headers by location, user agent or cookies. This check runs from our server without cookies.

Can it check internal sites?

No. Only public addresses can be checked; local and private IPs are blocked.

You may also need