Free Online Tool

HTTP Header Checker

Enter a public URL to inspect HTTP response headers, security headers, cache behavior, redirects, and final destination.

Check HTTP and security headers

HTTP headers describe how a website response should be handled by browsers, caches, and security tools. Ping7 highlights common headers such as content type, cache-control, HSTS, CSP, referrer policy, and frame protection.

Security headers: HSTS, CSP, X-Frame-Options, Referrer-Policy, and related signals.
Cache headers: cache-control and other response caching hints.
Content headers: content type and server metadata.
Redirects: final URL and redirect count before headers are returned.

How to use

Enter a public http:// or https:// URL.
Click Check Headers.
Review important headers and security header hints.
Use HTTP Status or Redirect Checker if you need deeper response code details.

FAQ

What are HTTP headers?

HTTP headers are metadata sent with a website response. They can describe content type, caching, redirects, cookies, security rules, and server behavior.

Which security headers should I look for?

Common security headers include Strict-Transport-Security, Content-Security-Policy, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, and Permissions-Policy.

Does a missing header mean my site is unsafe?

Not always. Header needs depend on the website, but missing security headers can be a useful starting point for hardening a site.

Why are private URLs blocked?

Local, private, and reserved addresses are blocked to prevent unsafe server-side requests.